434134 - Password protected entities within site cause multiple password requests

Status: RESOLVED DUPLICATE of bug 387652

(Toolkit :: Password Manager, defect)

Description

[Jens Benecke]

User-Agent:       Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; de; rv:1.9) Gecko/2008051202 Firefox/3.0
Build Identifier: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; de; rv:1.9) Gecko/2008051202 Firefox/3.0

Situation:

http://foo.bar is a normally accessible site which contains multiple images created by CGI scripts which reside under a HTTP Basic Authentication protected URL like

 <img src=/cgi-bin/protected/foo.cgi?image=23410429 />

etc. Realm, username and password are all the same.

Firefox 2 asked me for the HTTP password once when loading the page.
Firefox 3 since Beta4 (first one I tried) now asks for the password once for each such image. It pre-fills the password from Password Manager each time but the requests appear anyway.

The same behaviour exists when I protect the main site using a user/password and a different HTTP Realm. Using HTTP or HTTPS does not make a difference.

I would expect the password prompt to appear once only, even if used multiple times on the same page.

Thanks,

Jens

Reproducible: Always

Comment 1

[Jens Benecke]

Addendum: the real site this happens on is our internal server stats site. I made up a PHP script (under /mrtg, HTTP Basic protected URL) which collects all MRTG, Queuegraph, Couriergraph etc etc etc. generated graphics (under /cgi-bin using a different HTTP auth realm).

I can provide the url and a temporary login by private mail if this needs to be seen "live".