301786 - HTTP authentication failing in frame

Status: RESOLVED WORKSFORME

(Camino Graveyard :: Security, defect)

Description

[Aparajita]

User-Agent:       Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.8b2) Gecko/20050531 Camino/0.9+
Build Identifier: Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.8b2) Gecko/20050531 Camino/0.9+

If link is clicked in one frame that loads a page in another frame that requires
HTTP authentication, Camino is not passing the credentials, nor is it asking for
the user/pass. It just fails immediately.

Loading the link target in a separate tab works correctly.

This bug did not occur with 0.8.4.

FYI, the link in this case is not an <a href>, it's a map, so I'm not sure if
this occurs with an <a href> link. Here's the relevant HTML (it's from the
CommuniGate Pro admin page):

<MAP NAME="Objects">
 <AREA SHAPE="rect" COORDS="0,0,100,16"  HREF="Domains/*/AccountList.html"    
TARGET="TextBody">

 <AREA SHAPE="rect" COORDS="0,17,100,33" HREF="Domains/Domains.html"
TARGET="TextBody">
</MAP>

Reproducible: Always

Steps to Reproduce:
1. Create a frameset with a link in one frame to an HTTP authenticated page in
another frame.
2.
3.

Actual Results:  
Authentication failed.

Expected Results:  
Should have presented an authentication dialog.

Comment 1

[Smokey Ardisson (offline for a while; not following bugs - do not email)]

Reporter, your build is nearly two months old; please check with a nightly build.

(The sheet not being displayed sounds a bit like what was happening in bug
301432, but that only regressed on 28 Jun....)

Comment 2

[Simon Fraser [no longer active]]

We also need a testcase.

Comment 3

[Aparajita]

The build identifier was showing up wrong because of a User-Agent override left
over in the prefs.js file, probably from CaminoExtraPrefs.

I downloaded the 20050722 nightly build, threw out prefs.js, and now it is
working as expected.