Files downloaded are accessible from online email account after logging out




9 years ago
8 years ago


(Reporter: shankak, Unassigned)


Firefox Tracking Flags

(Not tracked)




9 years ago
User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv: Gecko/20100701 Firefox/3.5.11
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv: Gecko/20100701 Firefox/3.5.11

I downloaded a file from online email account & viewed by right clicking "open containing folder". I deleted that after viewing & logged out. Then I right clicked on Downloads & selected "Copy download link" & pasted on Firefox & it allowed me to download the same file even though I was logged out from the online account. 

Reproducible: Always

Steps to Reproduce:
1. Login to an online email account
2. Download a file (e.g image) & log out of the account
3. View using Download console & delete the file
4. Select "Copy download link" on download console & paste on browser. 
Actual Results:  
I was able to download the file again. 

Expected Results:  
Prompt user to log back in to download the file. 

When I cleared the cache & cookies, it prompted me to log back in again.
This is most likely a bug with the online email service not clearing the relevant cookies when you "signed out", rather than a Firefox bug. Would need more details to confirm (does it happen in other browsers?).
Group: core-security
this is not related to history, maybe cookies, but without an example url we don't have enough data to debug it.
Component: Bookmarks & History → Networking: Cookies
Product: Firefox → Core
QA Contact: bookmarks → networking.cookies
Last Resolved: 8 years ago
Resolution: --- → INCOMPLETE
You need to log in before you can comment on or make changes to this bug.