2006026 - [Unified Trust Panel] Protection details for moz-extension:, about: and file: pages become blank and show insecure padlock after viewing connection details and going back

Status: RESOLVED FIXED

(Firefox :: Address Bar, defect, P1)

Description

[Kestrel]

Attachment: Blank and insecure trust panel after navigating back

STR:

1. Make sure browser.urlbar.trustPanel.featureGate = true on latest Nightly 148.0a1 on Ubuntu 25.10.
2. Visit a moz-extension:// page.
3. Click the shield or extension button in address bar.
4. Click "Connection Secure" in trust panel.
5. Click back button.

Expected:
Details same as before going back.

Actual:
Color box "Firefox is on guard" message becomes blank. "Connection secure" padlock icon changes to insecure with red line through it.

The same thing happens on some about: pages like about:about and file:.

Regression window:
https://hg.mozilla.org/integration/autoland/pushloghtml?fromchange=d22bc4a88dd6c263911724d9693a2ddb5ea18811&tochange=2399ce10c9fb5ee72fd363003ca40ff6a4333393

Regressed by Bug 1976113.

Comment 1

[BugBot [:suhaib / :marco/ :calixte]]

Set release status flags based on info from the regressing bug 1976113

:daleharvey, since you are the author of the regressor, bug 1976113, could you take a look? Also, could you set the severity field?

For more information, please visit BugBot documentation.

Comment 2

[Daniel Holbert [:dholbert]]

This affects the network-error-pages that we show for sites that legitimately have HTTPS/SSL errors, too -- e.g.:
https://expired.badssl.com/
https://revoked.badssl.com/
https://untrusted-root.badssl.com/

All of these show an intact lock in the trust panel, but then if you click into & out of the details, the lock is shown as broken (despite still saying "Connection secure")

Comment 3

[Dale Harvey (:daleharvey)]

Attachment: Bug 2006026 - Don't overwrite connection attribute during trustpanel navigation. r=daisuke

Comment 4

[Dale Harvey (:daleharvey)]

Attachment: Bug 2006026 - Follow up to add null check for uri

Comment 5

[Pulsebot]

Pushed by [e-mail]:
https://github.com/mozilla-firefox/firefox/commit/10f0c275184c
https://hg.mozilla.org/integration/autoland/rev/e4049b194ea7
Don't overwrite connection attribute during trustpanel navigation. r=daisuke,desktop-theme-reviewers,urlbar-reviewers

Comment 6

[Iulian Moraru]

https://hg.mozilla.org/mozilla-central/rev/e4049b194ea7