654093 - Master password prompt looks like if it was active even if it's inactive

Status: RESOLVED INCOMPLETE

(Firefox :: Security, defect)

Description

[Nordware]

User-Agent:       Mozilla/5.0 (Windows NT 6.1; rv:5.0a2) Gecko/20110501 Firefox/5.0a2
Build Identifier: Mozilla/5.0 (Windows NT 6.1; rv:5.0a2) Gecko/20110501 Firefox/5.0a2

The blinking cursor in the master password dialog is always visible, even if the window is inactive and the password cannot be entered.

Reproducible: Always

Steps to Reproduce:
1. Perform any action that triggers a master password prompt.
2. Open the Start Menu of Windows to make the master password prompt inactive.
3. Click on the free space of the Windows task bar (NOT a task bar button).

Actual Results:  
The blinking cursor appears in the master password prompt, even though the windows is inactive and the password cannot be entered.

Expected Results:  
The blinking cursor should only appear if the master password prompt is the active window.

This also happens, if there are any add ons installed, which ask for the master password at startup of Firefox.

Comment 1

[u279076]

> The blinking cursor should only appear if the master password prompt is the 
> active window.

The purpose of the blinking application button in the taskbar is to notify you that there is an inactive dialog that requests your action. It should not blink if the window is active.

Unless I've misunderstood what you are claiming, this is not a bug.

Comment 2

[Nordware]

(In reply to comment #1)
> The purpose of the blinking application button in the taskbar is to notify
> you that there is an inactive dialog that requests your action. It should
> not blink if the window is active.
> 
> Unless I've misunderstood what you are claiming, this is not a bug.

I'm talking of the blinking CURSOR in the textbox of the master password prompt, not the taskbar button.

http://support.mozilla.com/media/uploads/gallery/images/masterpassword-prompt-en.png
In this picture you can see the cursor i'm talking about (the "|" appearing in text fields to indicate they are active and to mark the current position).

Comment 3

[u279076]

Attachment: Screenshot NOT reproducing bug

I'm unable to see what you are reporting -- see my screenshot. Please attach a screenshot in kind.

Thanks.

Comment 4

[Nordware]

Attachment: Screenshots describing the bug

The green screenshots show how it should work.

The first picture shows the master password prompt window active; the border of the textbox is slightly glowing blue, the cursor is blinking and the password can be entered by typing.

The second one shows the window in inactive state; the border of the textbox is gray, there is no text cursor and the password cannot be entered.


The red screenshots show the bug appearing.

Picture number three shows the master password prompt window inactive, but the textbox is glowing and the text cursor is shown, the password cannot be entered but it looks like if it could.

Picture number four shows how this could even be a security risk - The active window is Editor, but the master password prompt looks as if it was active. If you try typing in the password, you actually type it in the Editor window, so it is readable by everyone looking at your screen.

Comment 5

[Nordware]

(In reply to comment #3)
> Created attachment 531654 [details]
> Screenshot NOT reproducing bug
> 
> I'm unable to see what you are reporting -- see my screenshot. Please attach
> a screenshot in kind.
> 
> Thanks.

This bug does NOT occur under Windows XP. The picture linked in comment #2 was only to show what i'm meaning by "text cursor".

Comment 6

[u279076]

Thanks for providing those screenshots. These show that you are able to make the Master Password window behave properly when inactive (screenshot #2). I'm not 100% clear how you are reproducing screenshot #4 though. Both of these seem to contradict each other.

Also, thanks for bringing to my attention that you can only reproduce this on Windows 7.  I've tried testing this on Windows 7 with Firefox 6.0a1pre 20110511 and am unable to reproduce this bug at all.

Can you please provide me very specific steps to reproduce this bug? Is there any other information you can provide which might help me reproduce this bug?

Have you tried to reproduce this bug using a new Firefox profile? If not, you can do so by running firefox.exe -P

Comment 7

[Wayne Mery (:wsmwk)]

Nordware, can you still reproduce?
See questions in comment 6.

Comment 8

[Phoenix]

Resolved per whiteboard