Closed Bug 1713781 Opened 3 years ago Closed 3 years ago

404 error logging into bmo.com

Categories

(Core :: Networking, defect)

Firefox 88
defect

Tracking

()

RESOLVED INCOMPLETE

People

(Reporter: batelcruiser, Unassigned, NeedInfo)

Details

Attachments

(1 file)

Attached image 404-bmo.png

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Firefox/78.0

Steps to reproduce:

"Login" >> "Online banking", then entered my credentials at the next page (https://www.bmo.com/main/personal)

Actual results:

Firefox v88.0 (64-bit) : 404 server error.
Firefox v78.10.1esr (64-bit) : works fine.

Expected results:

Log in should work in all versions.

Removing the security exploit flag hiding this bug.

Group: firefox-core-security

The Bugbug bot thinks this bug should belong to the 'Core::Networking' component, and is moving the bug to that component. Please revert this change in case you think the bot is wrong.

Component: Untriaged → Networking
Product: Firefox → Core

Would you be able to help us find the change that introduced the bug by using mozregression?
https://mozilla.github.io/mozregression/quickstart.html

mozregression -g 78 -b 88 should work.
You'd have to log in about 20 times or so with different builds while mozregression narrows down the range of changes.

This is the easiest way to diagnose this. Alternate methods involve you sending us logs which may contain private info.
Thanks!

Flags: needinfo?(batelcruiser)

Hello

Please explain what exactly the above command would do?

This is my bank and and they will definitely lock me off if they detect some sort of automated login bot trying to login 20 times within 10 milliseconds, so I would like to avoid that.

If I can have control over the mozregression tool and could e.g. spread the 20 logins over 2-3 days I will do it.

Thanks

You'd have to log in manually - each time it would open a new browser window, you'll try to log in, then say if the bug happened or not.
You can check out the video in that link for an example of how the process would work.

Please reopen the bug if you can still reproduce this. Thanks!

Status: UNCONFIRMED → RESOLVED
Closed: 3 years ago
Resolution: --- → INCOMPLETE

From chat on Slack:

mstriemer  8 days ago
I tried a few times, first attempt sent me to confirm account details and stuff, worked fine. Logged out and logged in, got 404, tried again twice and it worked both timesIt worked twice on Edge
valentin  8 days ago
That's interesting. So you did get a 404 at one point?
mstriemer  8 days ago
Yeah, just switched to my mac and tried a few more times (3 I think?) and it failed once, the POST returns a 200 and it shows a 404 page, refreshed and confirmed to post again and it succeeded
valentin  8 days ago
Ah, ok. So the request is actually a 200, but the content it returns contains a 404 message? That means it's probably a server side issue
mstriemer  8 days ago
When it works the server gives a 302 as you’d expect
mstriemer  8 days ago
Seems quite intermittent, just worked twice in a row :man-shrugging:

So it appears it's both intermittent, and that the application is actually returning a 200 code, that shows a 404 message.
In this case the error is driven by the website. It's still possible Firefox is doing something wrong, but only the server can say why this failure is happening. I suggest contacting the bank support.

You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: