81564 - cannot logout completely from yahoo mail

Status: VERIFIED INVALID

(SeaMonkey :: General, defect)

Description

[newstarmy]

From Bugzilla Helper:
User-Agent: Mozilla/5.0 (Windows; U; Win98; en-US; rv:0.9) Gecko/20010505
BuildID:    2001050515

After I've logout, I clicked "logout completely", I even tried "login as new
user" trying to logout, but seems that after I clicked the "Back" button I could
still continue checking emails!  The logout page, however, showed that I've
"successfully logout" completely.

Reproducible: Always
Steps to Reproduce:
1.logout from yahoo mail
2.then click logout completely
3.try any way you think possible to go back to check mail screen without login
with password

Actual Results:  you should be able to see your previous login name, or even go
back to your mailbox to continue send/read emails!

Comment 1

[Dave]

I was seeing this on that build but haven't seen it for the last couple days
(currently running 2001051709/Linux).
I believe this is a cache issue of some sort and can be fixed by telling mozilla
to "compare the page in cache to the page in network" every time under
prefs->advanced->cache (at least that worked for me). However, I haven't been
able to reproduce it on this build regardless of cache settings.

Reporter, can you reproduce on the current nightlies?

Comment 2

[Alec Flett]

this has nothing to do with the DOM viewer!

Comment 3

[doctor__j]

WFM on Win32 build 2001051704.

Comment 4

[Dave]

Things I've noticed about yahoo mail:

1- After loggins out, you can hit the back button and see cached messages you've
already read. You can't, however, view any new messages and will instead get a
"your session has expired" page. I don't think there's much mozilla can do about
the cached messages issue, is there?

2- After logging out, if you return the the page entitled "Sign In - Yahoo
Mail," your login and password are still there and you (or someone else) can log
back in. Remembering the contents of text items is a useful feature but I think
password text fields (ones that replace the user's input with "*", for example)
should, as a security precaution, be blanked out once the user leaves the
page... is this feasible?

3- The cache issue I mentioned in my first comment (which the reporter may or
may not have been referring to) appears to be fixed in the current nightlies.


I'll search for bugs on the issue I mentined in "2" and file a new bug if I
don't find one (or this bug could be used, with some changes to the summary).
This unless someone has objections to this.

Comment 5

[Dave]

Hitting the back button and being able to view messages out of the cache is not,
IMHO, a bug so marking invalid. Reopen if you are of a different opinion.

Comment 6

[Daniel Wang]

*** Bug 169856 has been marked as a duplicate of this bug. ***

Comment 7

[Daniel Wang]

v