| 2008-09-18 22:40:22 |
Anders Kaseorg |
description |
Binary package hint: firefox-3.0
[Mozilla upstream suggests this might be an Ubuntu problem, so I’m filling a report here.]
Before letting you visit a potentially confusing URL with an embedded HTTP username:password, Firefox pops up a “helpful” warning dialog asking you to confirm the site you intended to visit. Unfortunately, it asks you to confirm that you intend to visit the _username_, not that you intend to visit the real site!
Confirm
You are about to log in to the site "members.tripod.com" with the username "www%2Egoogle%2Ecom", but the website does not require authentication. This may be an attempt to trick you.
Is "www%2Egoogle%2Ecom" the site you want to visit?
[No] [Yes]
I’m using firefox-3.0 3.0.2+build3+nobinonly-0ubuntu2, xulrunner-1.9 1.9.0.2+build3+nobinonly-0ubuntu1 on Ubuntu intrepid amd64. |
Binary package hint: firefox-3.0
[Mozilla upstream suggests this might be an Ubuntu problem, so I’m filling a report here.]
Before letting you visit a potentially confusing URL with an embedded HTTP username:password, Firefox pops up a “helpful” warning dialog asking you to confirm the site you intended to visit. Unfortunately, it asks you to confirm that you intend to visit the _username_, not that you intend to visit the real site!
For example:
http://www.google.com:search@members.tripod.com/
Confirm
You are about to log in to the site "members.tripod.com" with the username "www%2Egoogle%2Ecom", but the website does not require authentication. This may be an attempt to trick you.
Is "www%2Egoogle%2Ecom" the site you want to visit?
[No] [Yes]
I’m using firefox-3.0 3.0.2+build3+nobinonly-0ubuntu2, xulrunner-1.9 1.9.0.2+build3+nobinonly-0ubuntu1 on Ubuntu intrepid amd64. |
|
