863256 - Report Web Forgery warning is not always displayed

Status: RESOLVED WORKSFORME

(Firefox :: Security, defect)

Description

[Simona Badau, Desktop QA]

Mozilla/5.0 (Windows NT 5.1; rv:23.0) Gecko/20130417 Firefox/23.0
Build ID: 20130417031053

Steps to reproduce:
1. Launch Firefox with a new profile
2. Navigate to:
http://skjode.dk/royt.htm

Expected results:
The Reported Web Forgery! warning is displayed.

Actual results:
The Reported Web Forgery! warning is not displayed right away. After reloading the page several times or clearing everything from the cache the warning is finally displayed.

Note:
The issue is reproducible also on Firefox 21 beta 3 and on the latest Aurora 22.0a2.

Comment 1

[Curtis Koenig [:curtisk-use curtis.koenig+bzATgmail.com]]]

I can repro on 22.0a2 but not on 21(Beta), 20.0 (release) or 23.0a1(nightly)

Comment 2

[Simona Badau, Desktop QA]

(In reply to Curtis Koenig [:curtisk] from comment #1)
> I can repro on 22.0a2 but not on 21(Beta), 20.0 (release) or 23.0a1(nightly)

Please try every time on a clean profile, I can even reproduce this on Firefox 17.0.1. 

I'm still investigating for a regression range and I'll post the results as soon as possible.

Comment 3

[Johnathan Nightingale [:johnath]]

The safebrowsing code downloads a client side database for checking attack sites and web forgeries, and it can take several hours for a full DB download on a fresh profile.

Comment 4

[Curtis Koenig [:curtisk-use curtis.koenig+bzATgmail.com]]]

(In reply to Johnathan Nightingale [:johnath] from comment #3)
> The safebrowsing code downloads a client side database for checking attack
> sites and web forgeries, and it can take several hours for a full DB
> download on a fresh profile.

It just seems a bit odd that I could repro (on said clean profile) on all but one version though, I think we could have a regression here.

Comment 5

[Simona Badau, Desktop QA]

 Mozilla/5.0 (Windows NT 6.1; rv:2.0) Gecko/20100101 Firefox/4.0

I can reproduce this ever since Firefox 4.0 - it took me a while to get the Report Web Forgery warning.

Also, I found several other websites where the issue is reproducible:
http://www.account.guildwars2.com.en-log.pw/
http://diamondleadsystem.com/magic4/magicbox/assets/rebok.htm
http://users.atw.hu/12dnek/Jelszolopas/1.htm
http://www.poste.it.myposte.kvylk6.adrenalina.gr/online/poste.php?myposte=main
http://www.cadastrocomprapremiada.com/cielobrasil/

Comment 6

[Hani Yacoub, Desktop QA]

I couldn't manage to reproduce this issue. Since the bug was logged 9 years ago, most likely isn't reproducible anymore for the reporter also.
Closing this bug as resolved: Worksforme.