639450 - asb.co.nz - ASP serving error: application/vnd.wap.xhtml+xml opened as a file due to bad server-side browser sniffing

Status: RESOLVED FIXED

(Tech Evangelism Graveyard :: English Other, defect)

Description

[Leman Bennett [Omega]]

User-Agent:       Mozilla/5.0 (Windows NT 6.1; WOW64; rv:2.0b13pre) Gecko/20110304 Firefox/4.0b13pre
Build Identifier: 

http://forums.mozillazine.org/viewtopic.php?f=23&t=2124947&start=0

Not sure which module to file this under. But here goes nothing.

A user has reported that the listed banking site is not opening properly. Fx4 is being redirected to a mobile site with the normal HTTP flavor (http://www.asb.co.nz/) when every other browser is being redirected to the HTTPS flavor. 

When opening the secure site(https://www.asb.co.nz/) directly, the file dialog opens instead of rendering the page.

The site opens correctly in Fx3.6 and every other current browser that is throw at it.

Reproducible: Always

Comment 1

[Matthias Versen [:Matti]]

Seamonkey trunk/Firefox trunk User Agent:
Status: HTTP/1.1 200 OK
Connection:	close	
Date:	Mon, 07 Mar 2011 12:41:05 GMT	
Server:	Microsoft-IIS/6.0	
X-Powered-By:	ASP.NET	
X-AspNet-Version:	2.0.50727	
Cache-Control:	no-cache	
Pragma:	no-cache	
Expires:	-1	
Content-Type:	application/vnd.wap.xhtml+xml; charset=utf-8	
Content-Length:	27260

Firefox3 USer Agent:
Status: HTTP/1.1 200 OK
Connection:	close	
Date:	Mon, 07 Mar 2011 12:42:00 GMT	
Server:	Microsoft-IIS/6.0	
X-Powered-By:	ASP.NET	
X-AspNet-Version:	2.0.50727	
Cache-Control:	no-cache	
Pragma:	no-cache	
Expires:	-1	
Content-Type:	text/html; charset=utf-8	
Content-Length:	27260

This is a bug in the page and not Gecko -> TE

Comment 2

[Chris Lawson (gone)]

See also the similar bug 637395.

Comment 3

[Leman Bennett [Omega]]

Thanks. I suspected bad sniffing originally but wasn't quite sure.

Comment 4

[Matthias Versen [:Matti]]

contacted via webform.

Leman Bennett: use http://web-sniffer.net and watch the output with different user Agent settings.

Comment 5

[Matthias Versen [:Matti]]

"Thank you for sending through the email that claims to be from ASB Bank.

I can confirm that this is a phishing email and commend you on your
alertness, I have forwarded this to the IT department."

The ELIZA program that they use seems to think that I want to report a phishing email :-(
I guess they moved my mail to /dev/null :-(

Comment 6

[Tony Bullock]

I contacted ASB and they resolved the issue within 24 hours of FF4 release.  Site now functions as expected.

Comment 7

[Chris Lawson (gone)]

Sounds FIXED, then. Please pass our thanks on to ASB.