Closed Bug 1718063 Opened 5 years ago Closed 4 years ago

<form method=post> in HTTP-only site make GET request when private browsing

Categories

(Firefox :: Private Browsing, defect)

Firefox 91
defect

Tracking

()

RESOLVED INVALID
Tracking Status
firefox91 --- affected

People

(Reporter: heguro, Unassigned)

Details

Steps to reproduce:

  1. Start private browsing
  2. Open HTTP-only site that contains <form method="post"> (quick example: http://12hourssleep.webcrow.jp/2021/20210624_firefox_bug/ )
  3. Submit form

Actual results:

  1. Firefox tries to send POST request to https:// URL
  2. Firefox sends GET request to http:// URL, with no query

Turn on "Persist Logs" in network inspector to see step 4 request.

Expected results (1):

  1. Firefox sends POST request to http:// URL

Expected results (2):

  1. Firefox tries to send POST request to https:// URL
  2. Firefox sends POST request to http:// URL

Can reproduce in

  • Firefox Nightly for Windows 91.0a1 (20210623214552) (64bit)
    • Windows 10 Pro 21H1, Build 19043.1052
  • Firefox Nightly for Android 91.0a1 (Build #2015818075 / AC: 91.0.20210623143047, f8a5c6a05a / GV: 91.0a1-20210623095324 / AS: 79.0.0 / 2021-06-23T19:23:54.452)
    • Android 10 (Umidigi S5 Pro)
    • Android 8 (Samsung Galaxy S7 Edge)

Cannot reproduce in

  • Firefox Developer Edition for Windows 90.0b11 (64bit)
  • Firefox for Windows 89.0.2 (64bit)
  • Firefox Beta for Android 90.0.0-beta.5
  • Firefox for Android 89.1.1

Hi heguro,
I was able to reproduce this issue in Windows 10, using Nightly 91.0a1 (2021-06-27) (64-bit), not on Release 89.0.2 (64-bit) versions. I could reproduce it as described in provided steps, only on Private window, as reported.

I marked as New for visibility, in order to get the dev team involved.
If it's not relevant, 'Firefox-Private Browsing', please feel free to change the component if this is not the appropriate one.

Regards,
Jerónimo.

Status: UNCONFIRMED → NEW
Ever confirmed: true

Cannot reproduce in latest Firefox, so I closing

Status: NEW → RESOLVED
Closed: 4 years ago
Resolution: --- → INVALID
You need to log in before you can comment on or make changes to this bug.