Closed Bug 278513 Opened 20 years ago Closed 20 years ago

http://login:passwd@host login+passwd appear on printout

Categories

(Core :: Printing: Output, defect)

x86
All
defect
Not set
normal

Tracking

()

VERIFIED DUPLICATE of bug 186695

People

(Reporter: henning, Unassigned)

References

()

Details

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.5) Gecko/20050109 Firefox/1.0
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.5) Gecko/20050109 Firefox/1.0

If I login to a site typing my login+password into the url like this
http://login:password@host (I have several bookmarks of this form.), firefox
will hide login+password in the address bar. And it warns me that i log in to
this site. Fine so far. But when I print a page while logged in like this, the
complete URL (including password+login) will show up in the upper right corner
of the printout. I guess login+password should also be hidden there. 
I know that logging in like this is not common, but I like it.

Reproducible: Always

Steps to Reproduce:
1. log in to any page using the method described above
2. print the page to a ps or your printer

Actual Results:  
see your login on the printout


Expected Results:  
see the URL from the address line on the printout
Assignee: firefox → printing
Component: General → Printing
Product: Firefox → Core
QA Contact: general
Version: unspecified → Trunk
Confirming, adding a easy-test URL, nomininating because publicly displaying
passwords is BAD.
Status: UNCONFIRMED → NEW
Ever confirmed: true
Flags: blocking1.8b?
Flags: blocking-aviary1.1?
OS: Linux → All
Quick testing in other browsers - IE won't let me use the URL at all(!) and
Opera replaces the password with asterisks.
Doug: Please search for dupes before confirming a bug :) (this one was easy to
find).

*** This bug has been marked as a duplicate of 186695 ***
Status: NEW → RESOLVED
Closed: 20 years ago
Resolution: --- → DUPLICATE
Flags: blocking1.8b?
Flags: blocking-aviary1.1?
Status: RESOLVED → VERIFIED
You need to log in before you can comment on or make changes to this bug.