Open Bug 1758455 Opened 4 years ago Updated 4 years ago

HTTPS-Only Mode: Causes timeout when connecting to localhost

Categories

(Core :: DOM: Security, defect, P3)

Firefox 97
defect

Tracking

()

People

(Reporter: chriscz93, Unassigned)

Details

(Whiteboard: [domsecurity-backlog1])

User Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:97.0) Gecko/20100101 Firefox/97.0

Steps to reproduce:

  1. Add foobar.localhost to your /etc/hosts
  2. Start a Sinatra / Ruby / Python server on localhost that takes long to respond (In my case a Rails puma server on port 3000)
  3. Enable HTTPS-Only mode everywhere setting
  4. Visit foobar.localhost:3000 page

Actual results:

The connection times out and firefox responds with the Connection Timeout error page

Expected results:

  1. Localhost connections, whether aliased via /etc/hosts or not should not timeout.
  2. Clearer message as to why the timeout occurred

The Bugbug bot thinks this bug should belong to the 'Core::DOM: Security' component, and is moving the bug to that component. Please revert this change in case you think the bot is wrong.

Component: Untriaged → DOM: Security
Product: Firefox → Core
Severity: -- → S3
Status: UNCONFIRMED → NEW
Ever confirmed: true
Priority: -- → P3
Whiteboard: [domsecurity-backlog1]
You need to log in before you can comment on or make changes to this bug.