Beta testers are reporting that they're encountering the Corrupted Content Error on some sites, started with Firefox 12. http://input.mozilla.com/ja/?product=firefox&version=12.0&q=Corrupted Affected sites: http://pex.jp/ https://my.studylink.govt.nz/siteminder-web/login.do and maybe others I couldn't find any existing bugs for Firefox 12, so I've filed a new one.
Both those sites contain a empty "Location: " response header. That is specifically a security vulnerability the change was meant to close, so evangelism is in order.
People claim the issue is happening on Oracle's PeopleSoft applications. CCing Kev for outreach. http://input.mozilla.com/ja/opinion/2802975 http://input.mozilla.com/ja/opinion/2802531 Another (Japanese) site from Firefox Input: https://aqfr.net/
Looks like http://pex.jp/ (in my comment 0) and https://aqfr.net/ (in my comment 2) are run by the same Japanese company. I'll try to reach out to them if needed.
Bug 727495 was resolved dup of Bug 699502, so I'm doing the same for this.
Fixed by 742174: by popular demand we are now allowing empty Location headers again.
This is now mentioned on Firefox 12 for developers.
(In reply to Eric Shepherd [:sheppy] from comment #6) > This is now mentioned on Firefox 12 for developers. Ah, I've forgot to remove the dev-doc-needed keyword. Bug 742174 has been fixed to allow empty Location response headers again. I just removed the mention. Sorry for the confusion.