Closed Bug 1798276 Opened 2 years ago Closed 2 years ago

If you enable HTTPS-only mode in settings entering site crashes firefox (parent process)

Categories

(Core :: DOM: Security, defect, P3)

Product:
Core
Component:
DOM: Security
Version:
Firefox 108
Type:
defect

Tracking

()

Status:
RESOLVED DUPLICATE of bug 1793597

People

(Reporter: omerusta, Assigned: freddy)

References

(Blocks 1 open bug,
URL
)

Details

(Whiteboard: [domsecurity-active])

Crash Data

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:108.0) Gecko/20100101 Firefox/108.0

Steps to reproduce:

Steps to reproduce :
1- Open Firefox's settings menu
2- Enable Strict Rules
3- Enable HTTPS-Only Mode in all windows
4- Try to visit http://kb.mozillazine.org/
[not https://kb.mozillazine.org/ ]
5- Click Continue to HTTP site
6- Firefox completely crashes 😢

Actual results:

Just trying to visit a link and it made firefox 108 crashed

Expected results:

should work and visit related webpage

The Bugbug bot thinks this bug should belong to the 'Core::DOM: Security' component, and is moving the bug to that component. Please correct in case you think the bot is wrong.

Component: Untriaged → DOM: Security
Product: Firefox → Core
Status: UNCONFIRMED → RESOLVED
Closed: 2 years ago
Duplicate of bug: 1793521
Resolution: --- → DUPLICATE

This is a similar issue to bug 1793521, but not the same.
Bug 1793521 crashed because the URL would changed when parsed again, leading to different principals.
I assume we have a similar situation here, where the principal URL changes between http and https and doesn't match, leading to error being returned here and deserialization to fail.

Status: RESOLVED → REOPENED
No longer duplicate of bug: 1793521
Ever confirmed: true
Resolution: DUPLICATE → ---
See Also: → 1793521

bp-a588ff0d-fe2e-492d-ab02-1c0d50221101

Blocks: https-only-mode
Severity: -- → S3
Crash Signature: [@ mozilla::ipc::FatalError | mozilla::ipc::IProtocol::HandleFatalError | IPC::ParamTraits<mozilla::dom::WindowGlobalInit>::Read ]
Priority: -- → P3
Summary: If you enable HTTPS-only mode in settings entering site crashes firefox → If you enable HTTPS-only mode in settings entering site crashes firefox (parent process)

I don't know if it's relevant, but the upgraded connection to https://kb.mozillazine.org actually succeeds, and then it redirects to https://kb.mozillazine.org:80/Knowledge_Base (TLS scheme and port 80)

URL: http://kb.mozillazine.org/
Assignee: nobody → fbraun
Whiteboard: [domsecurity-active]
Status: REOPENED → RESOLVED
Closed: 2 years ago → 2 years ago
Duplicate of bug: 1793597
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.