83519 - Mozilla does not send user authentication info on POST with multipart/form-data encoding

Status: VERIFIED DUPLICATE of bug 44536

(Core :: DOM: Core & HTML, defect)

Description

[brettk]

When accessing a form which requires authentication and is initially downloaded
using the GET method, but uses the POST method and multipart/form-data encoding
for sending data, Mozilla does not send user authentication information to the
web server upon form submission.  The result is an error 401 returned to the
user and logged in the web server logs.  

An example of such a situation is a basic file input form, where a user first
logs in through traditional HTTP user authentication and downloads the form
using the normal GET method.  Assuming the form uses the POST method and
multipart/form-data encoding, the file upload will be rejected when the user
attempts to submit the form.  Changing the encoding to a different type or
changing the method results in Mozilla sending the correct authentication
information, however the file can not be uploaded.

Evidence of this occuring is seen in the httpd logs, where there is no user name
associated with the POST request.

Comment 1

[brettk]

Hmm... from my logs it seems that Mozilla does a first POST without the
authentication information and then attempts a second one after the 401, only
the second time, there's no form data... well, that's what Embperl is reporting
while it's parsing, anyway.  Odd...

Comment 2

[rods (gone)]

reassigning

Comment 3

[Eric Pollmann]

Nasty bug!

Happily, the fix was checked in on 15-May-2001.  Marking a duplicate.

Reporter, the fix should be in the next milestone builds of mozilla (0.9.1),
which will be coming out soon, or you can try a daily build here:

ftp://ftp.mozilla.org/pub/mozilla/nightly/latest


*** This bug has been marked as a duplicate of 44536 ***

Comment 4

[Vladimir Ermakov]

verifying duplicate