Open Bug 1327812 Opened 8 years ago Updated 1 year ago

Browser displays quotes " as \" in site identity everywhere (site certificate, location bar, identity panel)

Categories

(Firefox :: Security, defect)

Product:
Firefox
Component:
Security
Type:
defect

Tracking

()

People

(Reporter: arni2033, Unassigned)

References

Details

(Keywords: parity-chrome)

User Story

>>>   My Info:   Win7_64, Nightly 49, 32bit, ID 20160526082509

STR_1:
1. Open url https://ok-inform.ru/
2. Click on identity block -> ">" -> "More Info"
3. Click "View sertificate". Open "Details" tab
4. Select "Certificate Hierarchy" -> "ok-inform.ru".  Select "Certificate fields" -> Subject

AR:  3rd line in "Field value" is          «O = ООО \"ИД \"Общественный Контроль\"»
ER:  3rd line in "Field value" should be   «O = ООО "ИД "Общественный Контроль"»


STR_2:
1. Open url https://ok-inform.ru/
2. Look at identity block

AR:  Identity block displays         «ООО \"ИД \"Общественный К... (RU)»
ER:  Identity block should display   «ООО "ИД "Общественный Кон... (RU)»


STR_3:
1. Open url https://ok-inform.ru/
2. Click on identity block to open identity panel

AR:  Identity block displays         «ООО \"ИД \"Общественный Контроль\"»   in 3 places
ER:  Identity block should display   «ООО "ИД "Общественный Контроль"»      everywhere


Note:
1) If you need a follow-up for location bar case specifically, I would prefer if you notified me about
   that, so I could file it myself. That would reduce percentage of "Duplicates" among my reports.
2) also happens on site:   https://xcraft.ru/templates/Xcraft/images/landing7/en/colonize_terran.png
No longer blocks: 1277113
Component: Untriaged → DOM: Security
Product: Firefox → Core
STR_1 seems to be a regression since ESR-45, but STR_2 and STR_3 seems to have been around a while. Since this is showing up in the Certificate Hierarchy PSM code is probably the best place to start on this.
Component: DOM: Security → Security: PSM
Flags: needinfo?(dkeeler)
It looks like NSS does this to conform to RFC 2253 section 2.4 (https://www.ietf.org/rfc/rfc2253.txt), so I would be inclined to argue that STR 1 is correct as-is. For 2 and 3, however, I think that's more of a design decision - do we want to emphasize that these values come from a distinguished name or do we want a more friendly display?
Flags: needinfo?(dkeeler)
Changed corrupted text in comment 0 to not corrupted text in user story.
"[parity-Chrome]" extends to both STR_1 and STR_2/3. GoogleChrome does both things correctly - always
shows text in human readable form. You're telling me that it's according to the spec, right? Huh.
User Story: (updated)
s/according to/against/
Priority: -- → P5
Whiteboard: [parity-Chrome] → [parity-Chrome][psm-backlog]
Mass bug change to replace various 'parity' whiteboard flags with the new canonical keywords. (See bug 1443764 comment 13.)
Keywords: parity-chrome
Whiteboard: [parity-Chrome][psm-backlog] → [psm-backlog]
Severity: normal → S3

The severity field for this bug is relatively low, S3. However, the bug has 3 duplicates.
:keeler, could you consider increasing the bug severity?

For more information, please visit auto_nag documentation.

Flags: needinfo?(dkeeler)
Severity: S3 → --
Component: Security: PSM → Security
Flags: needinfo?(dkeeler)
Priority: P5 → --
Product: Core → Firefox
Whiteboard: [psm-backlog]
You need to log in before you can comment on or make changes to this bug.