292413 - css file is not fetched from https url, page is displayed without css formatting

Status: RESOLVED DUPLICATE of bug 227976

(Firefox :: General, defect)

Description

[Zoltan Frombach]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.7) Gecko/20050414 Firefox/1.0.3
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.7) Gecko/20050414 Firefox/1.0.3

When I visit the demonstration URL, the page is displayed without css
formatting! Looks like Firefox didn't fetch the css file. It is a phpsysinfo
generated page, phpsysinfo is quiet widely used ( see
http://sourceforge.net/projects/phpsysinfo/ ), however it might be related to
the fact that the above url is an encrypted (https) url. When you do a View Page
Source, the reference to the css file is clearly there in the head section:
<link rel="STYLESHEET" type="text/css" href="templates/classic/classic.css">

Now, if I visit this URL by copy&pasting it into firefox directly:
https://www.frombach.com/phpsysinfo/templates/classic/classic.css

And then I go back to the original phpsysinfo page, voila, the css formatting is
now there!! Well, until you clear your browser's cache... ;-) It is clearly a
bug in Firefox. Mozilla and IE displays the URL with css formatting every time,
just fine.


Reproducible: Always

Steps to Reproduce:
1. Clear your browser's cache
2. Visit https://www.frombach.com/phpsysinfo/ (Problem: page is displayed
without css formatting!)
3. Go directly to
https://www.frombach.com/phpsysinfo/templates/classic/classic.css to force
Firefox to fetch the css file and put it in the browser's cache
4. Go pack to https://www.frombach.com/phpsysinfo/ (now the css formatting is
present, page looks normal)

Actual Results:  
Page displayed without css formatting.

Expected Results:  
Page displayed wit css formatting.

Comment 1

[Uri Bernstein]

This is a duplicate of bug 222457 and bug 245608, both resolved as duplicates of
bug 227976. I verified that this is fixed in recent trunk builds (since 227976
was fixed).

*** This bug has been marked as a duplicate of 227976 ***

Comment 2

[Zoltan Frombach]

Okay, it was fixed almost a year ago... But then why it is still present in the
just release Firefox 1.0.3 public release? When will the fix-patch be included
in Friefox public release? Like Firefox 2.8.9 ???

Comment 3

[Uri Bernstein]

The fix was made on the trunk, after the Aviary (Firefox 1.0.x) branch was created.
The fix will be included in Firefox 1.1.

Comment 4

[Zoltan Frombach]

Great! Thanks!!

Comment 5

[Ralf Hauser]

Bug 333440 appears to be the opposite to the denial of service described here. A (minor) security hole.