Closed
Bug 1709552
Opened 4 years ago
Closed 3 years ago
HTTPS-First: 4xx and 5xx error responses might need a downgrade
Categories
(Core :: DOM: Security, task, P2)
Core
DOM: Security
Tracking
()
RESOLVED
FIXED
91 Branch
| Tracking | Status | |
|---|---|---|
| firefox91 | --- | fixed |
People
(Reporter: t.yavor, Assigned: t.yavor)
References
(Blocks 1 open bug)
Details
(Whiteboard: [domsecurity-active])
Attachments
(3 files)
Request to "https://speedofanimals.com"
If a site response with an error, i.e., a "404" for a https request, https-first should downgrade to http.
|
||
Updated•4 years ago
|
Severity: -- → S3
Status: NEW → ASSIGNED
Priority: -- → P2
Whiteboard: [domsecurity-active]
|
Assignee | |
Comment 1•4 years ago
|
||
The problem is that "https://speedofanimals.com" doesn't redirect to "www.speedofanimals.com", but "http://speedofanimals.com" --> "http://www.speedofanimals.com". ( Accidentally screenshoted one request more than needed)
|
|
Assignee | |
Comment 2•4 years ago
|
||
It upgrades when we call "http:/www.speedofanimals.com" to https
|
|
Assignee | |
Comment 3•4 years ago
|
||
Sorry, placed the comments wrongly
|
|
Assignee | |
Comment 4•4 years ago
|
||
|
|
Assignee | |
Updated•3 years ago
|
Summary: HTTPS-First: Add downgrade tests for bad responses to https request → HTTPS-First: 4xx and 5xx might need a downgrade
|
|
Assignee | |
Updated•3 years ago
|
Summary: HTTPS-First: 4xx and 5xx might need a downgrade → HTTPS-First: 4xx and 5xx error responses might need a downgrade
|
||
Updated•3 years ago
|
Attachment #9221139 -
Attachment description: Bug 1709552 HTTPS-First: Add downgrade tests for bad responses to https request. r=ckerschb → Bug 1709552 HTTPS-First: 4xx and 5xx error responses might need a downgrade. r=ckerschb
|
|
||
Updated•3 years ago
|
Attachment #9221139 -
Attachment is obsolete: true
|
|
||
Updated•3 years ago
|
Attachment #9221139 -
Attachment is obsolete: false
|
|
||
Updated•3 years ago
|
Attachment #9221139 -
Attachment description: Bug 1709552 HTTPS-First: 4xx and 5xx error responses might need a downgrade. r=ckerschb → Bug 1709552 HTTPS-First: Add downgrade tests for bad responses to https request. r=ckerschb
|
|
||
Updated•3 years ago
|
Attachment #9221139 -
Attachment description: Bug 1709552 HTTPS-First: Add downgrade tests for bad responses to https request. r=ckerschb → Bug 1709552 HTTPS-First: 4xx and 5xx error responses might need a downgrade. r=ckerschb
Pushed by mozilla@christophkerschbaumer.com:
https://hg.mozilla.org/integration/autoland/rev/8fe07e362771
HTTPS-First: 4xx and 5xx error responses might need a downgrade. r=ckerschb,necko-reviewers,valentin,JulianWels
|
||
Comment 6•3 years ago
|
||
| bugherder | ||
Status: ASSIGNED → RESOLVED
Closed: 3 years ago
status-firefox91:
--- → fixed
Resolution: --- → FIXED
Target Milestone: --- → 91 Branch
You need to log in
before you can comment on or make changes to this bug.
Description
•