358403 - Session restore: loading wrong content for frames

Status: RESOLVED INVALID

(Firefox :: Session Restore, defect)

Description

[Anthon Pang]

While in a logged in session with this business portal, the OS locked up while on a payment form. The computer/OS was warm-booted. Firefox restored the session by opening two tabs. The first tab was the portal login screen (unexpectedly malformed because FF loaded the wrong content for the frames), while the second (visible, active) tab correctly displayed the same login form.  Neither tab restored the previous login session, nor displayed the payment form.

Comment 1

[Anthon Pang]

Attachment: First tab

Comment 2

[Anthon Pang]

Attachment: Second tab

Comment 3

[Anthon Pang]

Attachment: Second tab (after restore)

Comment 4

[Anthon Pang]

Attachment: Tab 1 before crash

Comment 5

[Anthon Pang]

Attachment: Tab 2 before crash

Comment 6

[Simon Bünzli]

The problem is that the content of those frames depends on you being logged it, however Firefox doesn't save your log-in information because the site is accessed over a secure connection. While it restores the correct URLs, the site itself redirects you to the log-in page for every non-allowed page access (i.e. in most or all frames).

There's really not much we can do about this issue though, because there no way we could make a difference between URLs which can be restored as expected and the few exceptions where a cookie is needed but not saved/restored because of privacy reasons (note: not all discarded cookies are relevant for login).

Comment 7

[Simon Bünzli]

INVALID per comment #6.