515450 - accessibility.blockautorefresh does not detect "refresh" HTTP header

Status: RESOLVED INCOMPLETE

(Firefox :: General, defect)

Description

[Mikael Willberg]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.2) Gecko/20090729 Firefox/3.5.2 (.NET CLR 3.5.30729)
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.2) Gecko/20090729 Firefox/3.5.2 (.NET CLR 3.5.30729)

When accessibility.blockautorefresh=true and server sends following headers (copied from Live HTTP Headers add-on):

...
RESPONSE=HTTP/1.1 200 OK
refresh=0;http://blaablaa/
...

user is not asked what to do. Meta refresh works as expected.

The "refresh" in not capitalized and I suspect this header is checked with case-sensitive test. Briefly checking RFC did not help, but that wuold not change the gact that some servers seem to send these and the user is the one that suffers. I see no trouble if the header name is checked with case-insensitive manner, it does not get mixed with other header.

Reproducible: Always

Steps to Reproduce:
1. see above

Actual Results:  
Nothing happens.

Expected Results:  
User should be asked should this be allowed.

Comment 1

[Tyler Downer [He/Him]]

Reporter, are you still seeing this issue with Firefox 3.6.12 or later in safe mode? If not, please close. These links can help you in your testing.
http://support.mozilla.com/kb/Safe+Mode
http://support.mozilla.com/kb/Managing+profiles
Also, please consider using the most recent Firefox 4 beta build, your bug may be resolved there.

Comment 2

[Mikael Willberg]

The problem is still there with 3.6.12 and 4.0 beta 7. I created a test page for this

http://mig.hyper.fi/article/629

Meta refresh pages trigger "Allow this" bar, but when HTTP refresh page is opened...

3.6.12 the "Allow this" bar is briefly visible and then it vanishes
4.0b7 the "Allow this" bar does not appear

Comment 3

[Tyler Downer [He/Him]]

No reply, INCOMPLETE. Please retest with Firefox 3.6.13 or later and a new profile (http://support.mozilla.com/kb/Managing+profiles). If you continue to see this issue with the newest firefox and a new profile, then please comment on this bug.

Comment 4

[Mikael Willberg]

Retested with new profiles (actually deleted whole application data folder before testing each). Result is now the same for both:

Meta refresh pages trigger "Allow this" bar, but when HTTP refresh page is
opened "Allow this" bar is briefly visible and then it vanishes.

Comment 5

[Mikael Willberg]

Just noticed a new thing.

When page with HTTP refresh is opened, the the "Allow this" bar slides away and vanishes. If the page is then refreshed (F5) then the "Allow this" bar reopens and stays open as it should.

Comment 6

[tha.specializt]

blockautorefresh has no effect in FF 11.0