34810 - Secure section not accessable

Status: VERIFIED FIXED

(Core :: JavaScript Engine, defect, P3)

Description

[Nathan Kirkham]

Windows NT 4 SP5 Build 2000033112

Go to the main page of www.equitable.co.uk.
Click on Client Service Logon image button at the top.  It says you are now
entering a secure area message, but gets no further.  The process then seems to
go into a loop, and takes up large amounts of the processing usage.

Expected
It should show the standard browser authorisation dialog with username and password.

I can't tell if it is bad HTML because the link is a HTTPS and the w3c validator
doesn't work with them.

Comment 1

[Norris Boyd]

reassign to crypto.

Comment 2

[John Unruh]

Reassigning to javascript and mstoltz. Clicking on "Client Service Login" locks 
up the browser. Clicking on the link attempts to call up 
javascript:parent.login('services.nsf/services?openform',"Y")

Comment 3

[Phil Peterson]

[nsbeta2+]

Comment 4

[Gervase Markham [:gerv]]

Confirming.

Gerv

Comment 5

[Mitchell Stoltz (not reading bugmail)]

The link mentioned is a javascript URL. This might be related to the javascript 
URL referrer problem, that's my first impression. Otherwise it might be a bug in 
the JS crypto API.

Comment 6

[leger]

Putting on [dogfood-] radar since [nsbeta2+] already indicated.

Comment 7

[Mitchell Stoltz (not reading bugmail)]

The behavior I saw when running this testcase was different. Filed bug 42773 on
that issue. I'll leave this one open since 42773 may be covering this one.

Comment 8

[John Unruh]

Changing QA to czhang

Comment 9

[Mitchell Stoltz (not reading bugmail)]

This works now, with the fix to bug 42773. I see the SSL login dialog, which
seems to work fine. If there's still a problem accessing this site, please open
a new bug and assign it to the Security:Crypto component. Marking FIXED.

Comment 10

[cathy zhang]

verified