289525 - you can see asp source code when you visit asp website sometimes

Status: RESOLVED INVALID

(Firefox :: Security, defect)

Description

[zhangchangwei]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.0; zh-CN; rv:1.7.6) Gecko/20050226 Firefox/1.0.1
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.0; zh-CN; rv:1.7.6) Gecko/20050226 Firefox/1.0.1

you can see asp source code when you visit asp website sometimes.
the sourcecode is written by asp.
my company's net connection is very slowly

Reproducible: Sometimes

Steps to Reproduce:
1.visit asp website
2.when the page is dowloading very slowly.the connection is very slowly
3.Ok,you see the source code

Actual Results:  
see asp sourcecode

Expected Results:  
you shouldn't see the asp code whice run in server

Comment 1

[Devoti Paolo]

The server executes the source without sending it to the browser if it happens
something is wrong with the server.

Mozilla at most can hide <% %> content but the leaked source is still viewable
in page souce and the root problem belongs to the server.

Here a link showing an asp server sending out asp code
http://www.spin-it.com/strumentiricondizionati.htm

Comment 2

[Matthias Versen [:Matti]]

It's a server bug if the server sends the ASP code. -> invalid

Comment 3

[Elmar Ludwig]

*** Bug 298217 has been marked as a duplicate of this bug. ***

Comment 4

[Josh Birnbaum]

*** Bug 311406 has been marked as a duplicate of this bug. ***