91087 - No longer able to login to banking site (secure)

Status: VERIFIED FIXED

(Core Graveyard :: Security: UI, defect, P1)

Description

[frasertajima]

From Bugzilla Helper:
User-Agent: Mozilla/4.61 [en] (OS/2; U)
BuildID:    2001062912

Previous versions (0.9.1, .8, .6) permitted login to the banking site. This 
site uses Java or Javascript or both. Using 0.9.2, I am redireced to a page 
which states:

   System Message
   You cannot bookmark or directly access this page.

This had not happened previously. I was able to login before and at least view 
bank balances (even if I could not access all the banking functions correctly 
such as transfer of funds). Other secure banking sites are fine.

Reproducible: Always
Steps to Reproduce:
1.go to site www.hsbc.com.hk/script/hk/home.asp
2.enter junk id and password
3.before (i.e., 0.9.1) it would say invalid password (now it says you cannot 
bookmark the page).

Actual Results:     System Message
                    You cannot bookmark or directly access this page.

Expected Results:   either login properly or message complaining about invalid 
password

I ran this under OS/2. I am told this problem also arises under the Windows 
build. Previous builds (0.9.1, 0.8, 0.6) did not have this problem as far as I 
am aware.

NB: I am uncertain which component is involved and I have guessed the client 
library (rather than Daemon).

Comment 1

[John Unruh]

Workforme on WinNT with the 7/16 commercial build. Maybe it was a server 
problem, or try a later build.

Comment 2

[jhp (no longer active)]

No, still have problems on WinNT running build # 2001071704.  I go to the site,
then hit the "Logon" button in the upper right, which opens up a new page.  On
the new page, I enter a junk id and password and click the logon button, which
takes me to the next page.  This page says:
    System Message 
    You cannot bookmark or directly access this page.

If I try the same using Netscape Communicator 4.77, the resulting message says
invalid id or password.

I have tried to disable TLS, but this did not fix the problem.

Comment 3

[Stephane Saux]

Confirmed on linux build 0716200104.0.9.2

Comment 4

[Stephane Saux]

P1
failure

Comment 5

[jorge o. castro]

I see this bug with First Union online banking. Since .9.2 it gives me a page
similar to this "You cannot bookmark this page". I would assume it is related to
the problem you are having. Tested on three boxen, all the same results:

1) Linux .9.2 and Linux .9.2 w/Galeon .11
2) Windows NT4 w/Build 200107012003
3) Windows 95 w/.9.2

Everything was fine until the .9.2 timeframe. I assumed the problem was with my
bank since they were tweaking the interface. The customer rep gave me the
standard line "We only support windows and mac with IE." 

Comment 6

[Stephane Saux]

adding nsenterprise to all P1, P2 PSM bugs with target milestone of 2.1

Comment 7

[John Unruh]

Mass assigning QA to ckritzer.

Comment 8

[David P. Drinan]

This works for me now. This bug was probably fixed by the fix for 
http://bugzilla.mozilla.org/show_bug.cgi?id=89995, the SSL referral bug. Marking 
 fixed.

Comment 9

[ckritzer (gone)]

Marking VERIFIED FIXED on:
Win2k  2001-08-10-10-trunk Commercial
MacOSX 2001-08-10-05-trunk Commercial