230847 - Usability of Basic Authentication dialog when using tabbed browsing

Status: RESOLVED DUPLICATE of bug 121209

(Firefox :: General, defect)

Description

[Nick Lothian]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.5) Gecko/20031007 Firebird/0.7
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.5) Gecko/20031007 Firebird/0.7

If you are browsing with multiple tabs, and you "open link in new tab" for a
page that required (basic/http digest) authentication, then the dialog will
appear and block switching tabs. This can be a problem if you have (for
instance) the required username/password available on another tab.

When using multiple windows you can (obviously) switch between windows and
(possibly) cut and paste authentication information into the dialog. This
functionality is impossible to replicate with tabbed browsing.

I would suggest some thought needs to be put into the interaction of tabbed
browsing and modal dialogs. Perhaps attaching the modal window to the tab that
requires it would work, or perhaps a button on the dialog to make it non-modal.

However, it is pretty important that malicious webpages cannot subvert this
functionality by encouraging users to click pages to authenticated sites, and
then using javascript to emulate the authentication dialog and confuse the user
into entering their details into the wrong dialog.

Reproducible: Always

Steps to Reproduce:
1. Open page with link to authenticated page
2. Open link to (authenticated) page in new tab
3. Try and switch between tabs

Actual Results:  
You cannot switch tabs

Expected Results:  
You can switch tabs

Comment 1

[Jesse Ruderman]

Dup of bug 121209 or bug 123913.

*** This bug has been marked as a duplicate of 121209 ***