Open Bug 1721595 Opened 3 years ago Updated 11 months ago

Certificate Manager reacts to ctrl-tab

Categories

(Core :: Security: PSM, defect, P5)

Firefox 90
defect

Tracking

()

UNCONFIRMED

People

(Reporter: david.balazic, Unassigned)

Details

(Whiteboard: [psm-would-take])

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0

Steps to reproduce:

open to tabs
open Settings / Certificate Manager popup dialog.
press ctrl+tab

Actual results:

the tabs of the Certificate Manager dialog are switched
the next browser tab is brought to view

Expected results:

the tabs of the Certificate Manager dialog SHOULD NOT be switched
the next browser tab is brought to view


nightly test: can't test, as clicking the "Firefox Nightly" item in Windows start menu just opens a new window in the already running Firefox v90

The Bugbug bot thinks this bug should belong to the 'Firefox::Security' component, and is moving the bug to that component. Please revert this change in case you think the bot is wrong.

Component: Untriaged → Security

Hi,

I believe the Ctrl+tab shortcut is meant to work no matter which sub-menu you have open.
This is the same with the certificate manager as it is with the rest of the sub-menus you can open from about:preferences.

It also works the same on Firefox Nightly.

Why do you think this is an issue?
The sub-menu you have opened before switching tabs with ctrl+tab does stay open in the about:preferences tab.

Component: Security → Untriaged
Flags: needinfo?(david.balazic)

What other sub-menus do you mean? I tried to find another dialog in Settings that behaves like that but found none.

Also, you say "menu", I said "dialog".

Let me put it another way:
pressing ctrl+tab switches tabs, but additionally the old tab content (the web page) "sees" the keyboard input and reacts to it.

PS: This is more a GUI issue than security, so the bug Component should probably not be "Security". Although "web pages see key-presses they shouldn't" could be maybe exploited.

Flags: needinfo?(david.balazic)

Certificate Manager bugs seem to live in Security: PSM.

Component: Untriaged → Security: PSM
Product: Firefox → Core
Severity: -- → S4
Priority: -- → P5
Whiteboard: [psm-would-take]
You need to log in before you can comment on or make changes to this bug.