327967 - Passowrdbox keeps appearing, though page is not protected

Status: RESOLVED INVALID

(Firefox :: Security, defect)

Description

[Bert Verhees]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; nl; rv:1.8.0.1) Gecko/20060111 Firefox/1.5.0.1
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; nl; rv:1.8.0.1) Gecko/20060111 Firefox/1.5.0.1

On the website http://www.openehr.org on the front page the password-login box appears, and has to be cancelled two times. On the page http://svn.openehr.org/specification/BRANCHES/Release-1.0-candidate/ it appears 7 times. on many more pages on this site it appears.

Already discussied it with the site-maintainer, and he confirms that all pages are not protected in anyway.

I tested this website in IE and in Opera, and they did not have a problem.
It is therefore a Firefox-specific problem.

Reproducible: Always

Steps to Reproduce:
1.go to http://www.openehr.org
2.wait until page is fully loaded
3.passowrd-loginbox appears
4.cancel it
5.it appears again
6.cancel it, it stays away
7.go to another page, f.e http://svn.openehr.org/specification/BRANCHES/Release-1.0-candidate/, it appears again (cancel 7 times)

Comment 1

[Josh Birnbaum]

What type of password prompt are you getting (i.e. which password are you being prompted for)?

Comment 2

[Ben Fowler]

2006021911 (v1.2+)

Both of the URLs you quote WFM.

Comment 3

[Bert Verhees]

Attachment: picture of passwordbox

Comment 4

[Bert Verhees]

As you can see, I uploaded a picture of the passwordbox.
It is in dutch, and it wants a password for the svn-server which generates the pages partly.

But I must say again, the pages are not protected, and no browser, not even Firefox for Linux ask for a password

Comment 5

[Bert Verhees]

Attachment: Firefox tries to laod Robot.txt

Comment 6

[Bert Verhees]

Attachment: IE does not load Robot.txt

Comment 7

[Bert Verhees]

Attachment: IE given explicitly order to load Robot.txt

Comment 8

[Bert Verhees]

Apart from the question if Robot.txt should be loadable, it is a fact that most browsers do not load it, and Firefox for Windows does.

Comment 9

[Bert Verhees]

I found the problem, it is Fasterfox, which reads the Robot.txt
At this particular site, a robot.txt exists, but request for authentication, that is a wrong configuration, but fasterfox should handle this more gently