1747673 - HTTPS First in PBM breaks http://docs.imsidesign.com/

Status: RESOLVED FIXED

(Core :: DOM: Security, defect, P2)

Description

[jscher2000]

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:95.0) Gecko/20100101 Firefox/95.0

Steps to reproduce:

Navigate to http://docs.imsidesign.com/projects/TurboCAD-2021/turbocad-2021-user-guide-publication/Customized-Programming/Parametric-Part-Script-Editing/ in a regular window and a private window.

Actual results:

Regular window: page loaded fine.

Private window: HTTPS First redirected and server (Cloudflare) returned 521 error.

Expected results:

Since HTTPS First doesn't allow user exceptions, could it handle this kind of error as a potential connection issue?

More generally, HTTPS First is an underdocumented feature that is difficult to troubleshoot on SUMO. https://support.mozilla.org/questions/1362289

Comment 1

[Francesco]

This seems closely related to bug 1729618, possibly a duplicate. See the issues reported there and the comments.

Comment 2

[Tomer Yavor]

I can reproduce the bug. It occurs since https-first (till now) only consider to downgrade requests with a response error status between 400 - 511 (https://searchfox.org/mozilla-central/source/dom/security/nsHTTPSOnlyUtils.cpp#474-475).
That should probably adjust to 400 - 525.

Comment 3

[Tomer Yavor]

Attachment: Bug 1747673 - HTTPS First fallback to http for non-standard 5xx status code responses. r=ckerschb

Comment 4

[BugBot [:suhaib / :marco]]

The severity field is not set for this bug.
:ckerschb, could you have a look please?

For more information, please visit auto_nag documentation.

Comment 5

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/0d863192031a
HTTPS First fallback to http for non-standard 5xx status code responses. r=ckerschb,kershaw

Comment 6

[Natalia Csoregi [:nataliaCs]]

https://hg.mozilla.org/mozilla-central/rev/0d863192031a