285241 - href="#" under https unlocks the padlock, firefox 1.0.1

Status: RESOLVED DUPLICATE of bug 283733

(Firefox :: Security, defect)

Description

[Markus Pohjanen]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; sv-SE; rv:1.7.6) Gecko/20050226 Firefox/1.0.1
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; sv-SE; rv:1.7.6) Gecko/20050226 Firefox/1.0.1

When an anchor hyperlink reference ( <a href="#" ) is pointing to the document
root(href="#") under ssl (https) the padlock which indicates a secure connection
unlocks incorrectly. Firefox 1.0.1

Reproducible: Always

Steps to Reproduce:
1.Create a html-page with a link, <a href="#">testme</a>
2.Call the page under a secure connection, https
3.Click the link. The padlock unlocks

Actual Results:  
The padlock incorrectly unlocks

Expected Results:  
This action isn't in any way jeopardizing security and the padlock should have
remained locked.

Comment 1

[OstGote!]

This is fixed on the latest builds from the branches.

http://ftp.eu.mozilla.org/pub/mozilla.org/firefox/nightly/latest-aviary1.0.1/

after 2005-03-07-19 builds

*** This bug has been marked as a duplicate of 283733 ***

Comment 2

[Daniel C]

Attachment: Testcase.

Testcase. Seeing as the attachments here are stored on a secure server, this
should confirm or not confirm the bug.

Comment 3

[Daniel C]

(In reply to comment #2)
> Created an attachment (id=176710) [edit]
> Testcase.
> 
> Testcase. Seeing as the attachments here are stored on a secure server, this
> should confirm or not confirm the bug.

WFM with Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8b2)
Gecko/20050307 Firefox/1.0+