429544 - Impossible to add exception upon certificate error within iframe.

Status: RESOLVED INVALID

(Firefox :: Security, defect)

Description

[Pedro Soria-Rodriguez]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9b5) Gecko/2008032619 Firefox/3.0b5
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9b5) Gecko/2008032619 Firefox/3.0b5

This bug is very much related to Bug 423247.

In that bug, I described a problem with Ffox 3 beta 4 when visiting www.renfe.es (spanish railways).   The bug was fixed, but now in Ffox 3 beta 5, the behaviour on the same webpage is different, but it's still not possible to add an exception.


Reproducible: Always

Steps to Reproduce:
Steps to Reproduce:
1. Go to www.renfe.es (spanish ralways)
2. There's a pull down menu with the text "Principales Estaciones Origen"
(departure train stations).   In that menu, select any entry (for instance,
"Madrid")
3. Then, within the same iframe, a warning message shows up, with the following message:
................
Secure Connection Failed
w1.renfe.es uses an invalid security certificate.
The certificate is not trusted because the issuer certificate is not trusted.
(Error code: sec_error_untrusted_issuer)
....................

I was able to copy the whole text with mouse selection, but the whole text cannot be seen.   Next I will add a screenshot.  


Actual Results:  
 It's not possible to scroll down, and therefore it's not possible to add an exception (not possible to press any button or link to add exception).

Expected Results:  
The error message (warning) should appear in a way such that the user can add an exception if they wish.

Comment 1

[Pedro Soria-Rodriguez]

Attachment: Renfe.es on FFoxbeta5, showing SSL warning in iframe

Comment 2

[Matthias Versen [:Matti]]

It's possible that add an exception, very easy IMHO.
Right click in that frame, select "open frame in a new tab" and add the exception there.
Note: This works only in recent trunk builds because of bug 423833

marking wfm because there is a way

Comment 3

[Pedro Soria-Rodriguez]

Thanks, Matthias.   I didn't think about that workaround.

I don't think, however, this workaround will sit well with the average user.  The average user will not figure out that this is a frame, or that they can right click, and choose "show only this frame" or similar.

IMHO the real problem is that Renfe's webpage is very poorly designed and implemented,  so I don't consider this a critical problem of Firefox, but a critical problem of Renfe.    

However, I cannot help but think that the user interface provided by the browser should help the user in these type of situations.      I believe that the pop-up error window would be a better option, so the user sees right away that there is a problem, and the user is clearly given the option of adding an exception.

For this reason, I think this bug should remain open (unless this issue is dealt with by other bug reports;  I searched but I didn't see anything similar).

Comment 4

[Matthias Versen [:Matti]]

Then please file a new bug.
Your summary and description is "Impossible to add exception" and that's not right because it's possible, that's the reasons why this is not valid.

You are free to write a bug "make adding exceptions in iframes easier" and we also have bug 399876

Comment 5

[Pedro Soria-Rodriguez]

Thanks, Matthias.   I agree, the word "impossible" in the title is not accurate.  I described it that way because I didn't think of the workaround you pointed at.  I agree to close this bug, and I will add comments on the bug you just mentioned.