1733022 - HTTPS redirect infinite loop

Status: RESOLVED DUPLICATE of bug 1725646

(Web Compatibility :: Site Reports, defect)

Description

[Klutta]

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:92.0) Gecko/20100101 Firefox/92.0

Steps to reproduce:

Using private browsing, go to bom.gov.au.

Actual results:

You are redirected to a page, which states "The Bureau of Meteorology website does not currently support connections via HTTPS. You will shortly be redirected to http://www.bom.gov.au." After several seconds, you are redirected to the HTTP link, but private browsing still attempts to use HTTPS, so is redirected back to the same page. This happens in an infinite loop that you can not access the website at all in private browsing, not even via HTTP.

Expected results:

After attempting to connect with HTTPS, after this fails, allow connection with HTTP. The website will then be accessible.

Comment 1

[BugBot [:suhaib / :marco/ :calixte]]

The Bugbug bot thinks this bug should belong to the 'Firefox::Private Browsing' component, and is moving the bug to that component. Please revert this change in case you think the bot is wrong.

Comment 2

[Jeronimo Torti (Please send NI request to Brindusa Tot)]

Hi Klutta,
thank you for taking the time to submit this bug report.
I was able to reproduce on Windows 10, on Firefox Nightly 94.0a1 (2021-10-01) (64-bit) and Release 92.0.1 (64-bit) versions, the same way as described in Actual Results. I set the severity and flags accordingly.

I let the assigned component in order to get the dev team involved, but if it's not relevant,
'Firefox-Private Browser' team, please feel free to change the component if this is not the appropriate one.

Regards,
Jerónimo.

Comment 3

[:Gijs (he/him)]

The server sends:

Upgrade-Insecure-Requests: 1

as a http header with the https page, so the website itself is responsible for this infinite loop.

Comment 5

[:Gijs (he/him)]

Oops, duping to the right bug this time.