64672 - Suppyling "user" and "password" in URL does not work with HTTP...

Status: VERIFIED INVALID

(Core :: Networking: HTTP, defect)

Description

[Roland Mainz]

Any attempt to browse
http://redlist:[e-mail]/redlist/ with
Mozilla5 will still pop-up the Password dialog - Mozilla4 simply accepts that
URL...

Comment 1

[Roland Mainz]

Sorry, wrong URL, http://puck.informatik.med.uni-giessen.de/redlist/ is a
redirect to http://puck.informatik.med.uni-giessen.de/imi/redlist (question is
if the password should be given to the redirected URL, too...)... ;-(
Updating URL...

Comment 2

[Darin Fisher]

adding keyword 4xp
for parity with NS4, we should forward the prehost on redirect.
should be easy to fix... patch coming...

Comment 3

[Roland Mainz]

What about an option "bookmark 'user and password as URL'" ?

Comment 4

[Darin Fisher]

Roland: sounds interesting, but not sure that I'm following you... can you
elaborate?  thanks!

Comment 5

[Roland Mainz]

Simple: Instead of putting the creds (user+password) into the "password" manager
the creds are stored within the URL itself.
1. Bookmarking a page which is password-protected should ask whether the creds
should be put into the URL.
2. When user asks for "remember user and password for this site" there should be
an option to store this either in
a) the password manager database
OR
b) as bookmark

Comment 6

[Darin Fisher]

I see... you should post your suggestion to one of the newsgroups... maybe
even netscape.public.mozilla.general.  I think you might generate some
interesting feedback.

Comment 7

[Roland Mainz]

The only problem I can see here is security - some people link their bookmark
file into the web...

What comments do you expect from the newsgroups ? 

----

BTW: Is there a reason why the bug still as "NEW" status ?

Comment 8

[Darin Fisher]

removing 4xp keyword.

when i try the URL
http://redlist:[e-mail]/redlist/
from NS4.75, i am prompted for a username and password.  these are
not being forwarded on redirect, which is identical to the behavior
of Mozilla and NS6.0.

marking invalid... reporter, please verify and reopen this bug if necessary.

Comment 9

[Roland Mainz]

Verified. My mistake, I didn't make a "clean" test which requires restarting
both browsers after each test cycle... ;-(
Sorry...

What about the remaining issues ("creds in bookmark-URL"&co.) ? Should I file a
seperate RFE for this ?

Comment 10

[Darin Fisher]

It's an easy mistake to make (sigh)
...an RFE would do nicely.

Comment 11

[Roland Mainz]

Filed 'Bug 64990 "add bookmark" should ask if user creds should be put into the
bookmark URL...'...