310549 - No lock and yellow bar when entering https sites

Status: RESOLVED INCOMPLETE

(Firefox :: Security, defect)

Description

[jean-christophe broudin]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; fr-FR; rv:1.7.12) Gecko/20050919 Firefox/1.0.7
Build Identifier: Firefox/1.5 Deer Park Beta 1

When logging to a secured https site, the location bar should turn yellow, with
a lock at the end, and a locked lock in the far bottom right of the navigator.
But isn't.


Reproducible: Always

Steps to Reproduce:
1. Log to the site (a bank or hotmail)
2. Enter secure zone ( a password-to-give zone )
3.

Actual Results:  
Location bar remains white, lock icon in the far bottom right remains open.

Expected Results:  
Location bar should turn yellow, with a lock at the end, and a locked lock in
the far bottom right of the navigator.

I switched back to latest stable release Mozilla 1.0.7, and everything turned
right: actual result was expected result. This is a bug from new 1.5 release.

Comment 1

[Jesse Ruderman]

This bug would hurt security, but keeping it confidential doesn't protect users,
so I'm making it public.

WFM at this bug report (Bugzilla uses https) and using the default theme.

I'm using Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b5)
Gecko/20050929 Firefox/1.4.

Comment 2

[u63580]

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b5) Gecko/20050926 Firefox/1.4

WFM for bugzilla and others, including hotmail using https.  Have you tried a
new profile and safe mode - this could be something odd messed up.

Comment 3

[Ria Klaassen (not reading all bugmail)]

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b5) Gecko/20050929
Firefox/1.4 ID:2005092922

WFM in branch and trunk.

Comment 4

[Daniel Veditz [:dveditz]]

WFM also. Do you see the lock here in bugzilla.mozilla.org?

What happens if you run from the command line with -safe-mode ? (this disables
most add-ons)

Do you have any themes installed? The icon lock and background color are part of
the theme and someone might have messed up.

Did you use the same profile on the 1.0.7 that worked and the 1.5 that didn't?

By "new 1.5 release" which build do you mean exactly? The user agent from the
broken 1.5 would be more helpful than the UA from your working 1.0.7 version.
Type about: in the location bar, and copy it from there.

Thanks!

Comment 5

[Carsten Book [:Tomcat]]

-> incomplete since no reply for the questions from comment #4 since over 1,5 years.

jean-christophe broudin, if this is still an issue and if you're willing to provide more information to help us reproduce this, please comment in the bug with a response to comment #4