2007993 - favicon.ico is not loaded on basic auth protected resources

Status: UNCONFIRMED

(Firefox for Android :: Browser Engine, defect)

Description

[Maxim]

Steps to reproduce:

I have a web-site that is protected by basic HTTP auth (Apache configuration).

This web-site has a favicon defined in the following way:

    <link rel="apple-touch-icon" href="/logo.png"/>
    <link rel="icon" type="image/x-icon" href="/favicon.ico"/>
    <link rel="shortcut icon" type="image/x-icon" media="all" href="/favicon.ico"/>

The /favicon.ico and /logo.png are also basic auth protected.

When opening the page, the basic auth login prompt is shown and correct login/password are entered

Actual results:

The page is fully loaded, however the favicon is not.

Checking the server logs indicates that the attempt was made, but the response was 401. I.e., Firefox did not use the provided basic auth to load /favicon.ico

Expected results:

The browser is expected to handle this case and use the provided basic auth credentials to load the /favicon.ico, just like any other resources from the same page (which are loaded successfully).

The problem is only reproducible in Firefox for Android and iOS.

Desktop Firefox works properly. Other mobile browsers (Chrome, Brave) also work properly on the same page. Only Firefox mobile experiences the issue

Comment 1

[BugBot [:suhaib / :marco/ :calixte]]

The severity field is not set for this bug.
:boek, could you have a look please?

For more information, please visit BugBot documentation.