537714 - Multiple Form tags bug while in HTTPS mode will Throw an warning if First form tag is not and HTTP and other form tag being submitted is HTTPS

Status: UNCONFIRMED

(Firefox :: General, defect)

Description

[Sean Irish]

User-Agent:       Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.2; .NET CLR 1.1.4322; MS-RTC LM 8)
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.6) Gecko/20091201 Firefox/3.5.6

While posting to a web page using SSL, FireFox will throw a warning on a web page if the first Form tag does use SSL even know you are submitting the information using the second form to submit the information is using https.

The warning message received:

"Although this page is encrypted, the information you have entered is to be sent over an unencrypted connection and could easily be read by a third party.

Are you sure you want to continue sending this information?"


Reproducible: Always

Steps to Reproduce:
1. Create a web page. Create two forms; both should be post actions. Point the first to a url that does not use http and the second to point to a https url. Add a submit button to the second form tag.
2. Open FireFox 3.5.6 and open the web page in SSL.
3. Click on the submit button on the second form.
Actual Results:  
"Although this page is encrypted, the information you have entered is to be sent over an unencrypted connection and could easily be read by a third party.

Are you sure you want to continue sending this information?" will be displayed.

Clicking either continue or cancel will still post the form.

Expected Results:  
No warning on submittion of data to SSL link.

1. The software should have recognized which form was submitted and posted a warning based upon that.
2. FireFox should not had allowed a submittion of data to occur when the "Cancel" button was clicked.

Comment 1

[Sean Irish]

As of 3.5.9, the cancel button now works. However, Firefox still mis-identifys the forms of which is being submitted.

Comment 2

[Tyler Downer [He/Him]]

Reporter, are you still seeing this issue with Firefox 3.6.13 or later in safe mode? If not, please close. These links can help you in your testing.
http://support.mozilla.com/kb/Safe+Mode
http://support.mozilla.com/kb/Managing+profiles

You can also try to reproduce in Firefox 4 Beta 8 or later, there are many improvements in the new version, http://www.mozilla.com/en-US/firefox/all-beta.html

Comment 3

[Sean Irish]

This bug still exists in the 3.5.13 version and the new Firefox 4 beta 8.