warn_submit_insecure should trigger on ajax requests

NEW
Unassigned

Status

()

Product:
Firefox
Component:
General
Reported:
8 years ago
Modified:
8 years ago

People

(Reporter: panard, Unassigned)

Tracking

Firefox Tracking Flags

(Not tracked)

Details

(Whiteboard: [bugday-20110401], URL)

(Reporter)

Description

•
8 years ago 
User-Agent:       Mozilla/5.0 (X11; Linux x86_64; rv:2.0) Gecko/20110322 Firefox/4.0
Build Identifier: Mozilla/5.0 (X11; Linux x86_64; rv:2.0) Gecko/20110322 Firefox/4.0

Having security.warn_submit_insecure set to true should trigger a warning when a site tries to submit data by doing an ajax request.


Reproducible: Always

Steps to Reproduce:
1. set security.warn_submit_insecure to true
2. goes on a website using ajax to submit data (like the URL specified in this BR)

Actual Results:  
triggering an ajax request won't warn you.

Expected Results:  
warning dialog.

Comment 1

•
8 years ago 
Tested with that url and I can reproduce the bug

Build: Mozilla/5.0 (X11; Linux x86_64; rv:2.2a1pre) Gecko/20110401 Firefox/4.2a1pre

Build: Mozilla/5.0 (X11; Linux i686 on x86_64; rv:2.2a1pre) Gecko/20110401 Firefox/4.2a1pre

Comment 2

•
8 years ago 
To be fair, I only agree with your opinion in the case of insecure ajax requests.
Status: UNCONFIRMED → NEW
Ever confirmed: true
Whiteboard: [bugday-20110401]
You need to log in before you can comment on or make changes to this bug.