925680 - Duplicated tabs (ctrl + drag) should persist disabled protection option for MCB

Status: NEW

(Firefox :: Security, defect)

Description

[Mihai Morar, (:MihaiMorar)]

STR:

1. Load a page with mixed active content (e.g. https://people.mozilla.com/~bsterne/tests/62178/test.html)
2. Click the shield icon.
3. Click the arrow next to "Keep blocking"
4. Select "Disable protection on this page"
5. Reload the page.
6. Duplicate the tab using (CTRL+drag)

Expected results:
After step 5 the shield and lock icons shouldn't be displayed again and the script should be loaded.
After step 6 the shield and lock icons shouldn't be displayed again and the script should be loaded.

Actual results:
After step 5 - Works as expected.
After step 6 the shield and lock icons are displayed again and the script and the insecured script in not loaded.

This is happening on Latest Nightly 27 and FF 25b7 too.

Tanvi can you please take a look at this issue?

Comment 1

[Mihai Morar, (:MihaiMorar)]

This is related on FF 24.0 too, it is not a regression.

Comment 2

[Christoph Kerschbaumer [:ckerschb]]

(In reply to Mihai Morar, QA (:MihaiMorar) from comment #0)
> Actual results:
> After step 5 - Works as expected.
Indeed, just verified.

> After step 6 the shield and lock icons are displayed again and the script
> and the insecured script in not loaded.

Bug 906190 allows to persist a users decision of disabling MCB when loading new tabs trough |right-click| or also |ctrl-click|. However, bug 906190 does not allow to persist a users decision when a new tab is created through |ctrl+drag|.
Let's leave this bug open for now, and we decide later if and how we are going to fix this.

Comment 3

[Christoph Kerschbaumer [:ckerschb]]

Please also see comment 50 in bug 906190:
  https://bugzilla.mozilla.org/show_bug.cgi?id=906190#c50

Comment 4

[Christoph Kerschbaumer [:ckerschb]]

Attachment: bug_906190_child_tabs_ctrl_drag_part.patch

Attaching a work in progress patch, which allows to persist a users decision of disabling MCB for |CTRL-DRAG| of links into a new tab. Please note, that this patch does not support |CTRL-DRAG| (duplicating) the current tab.