265420 - Possibility to see source of secure web pages in Javascript console after logout.

Status: RESOLVED DUPLICATE of bug 265228

(Toolkit Graveyard :: Error Console, defect)

Description

[Marcin Kowalski]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; rv:1.7.3) Gecko/20041001 Firefox/0.10.1
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; rv:1.7.3) Gecko/20041001 Firefox/0.10.1

I've found that it's possible to see html source of secure (SSL) web pages with
javascript errors/warnings even after logout from secure webpage. Bank account
management services rarely care about browser compatibility issues and produce
lots of javascript error messages.

Reproducible: Always
Steps to Reproduce:
1. Login into any ssl webpage with javascript bugs on it.
2. Logout
3. Click on error message in debugger/console

Actual Results:  
I could read contents of secure web page after I completely logged out.

Expected Results:  
Do not cache SSL pages or add such option in configuration.

Comment 1

[Ben Bucksch (:BenB)]

Very similar to bug 265228.

*** This bug has been marked as a duplicate of 265228 ***

Comment 2

[Daniel Veditz [:dveditz]]

Clearing confidential flag, dupe of non-confidential bug