User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.5) Gecko/20031007 Firebird/0.7 Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.5) Gecko/20031007 Firebird/0.7 1. Trying to connect to spamcop, a dialog box pops up. I click cancel, and get the page anyway. 2. When transferring from page to page within spamcop (reporting spam), I am prompted for username and password, and now they're required. Reproducible: Always Steps to Reproduce: 1. Use URL above with real username and password 2. Click cancel 3. Enter spam to be reported 4. Click process spam Actual Results: After step 2, you are logged in to spamcop. After step 4, you are prompted for username/password Expected Results: The username/password dialog box should never have been shown in this session.

When I visit that URL and click Cancel, I get 401 Access Denied.

When you get the 401 page, press the back button and you end up at the page to which you should have gone directly.

User should be able to disable this feature! Fix it before 1.0! :(

Disable what feature? The user:pass@host capability? That was Microsoft's approach, be we *expect* them to be stupid. It works in Mozilla (at least, the last time I tried).

(In reply to comment #4) > Disable what feature? The user:pass@host capability? That was Microsoft's > approach, be we *expect* them to be stupid. It works in Mozilla (at least, the > last time I tried). Not user:pass@host capability, but the popup warning telling "you are connecting to host and user". Actually even better than to completely disable the popup, would be a possibility to set a list domains, which don't give this warning. I know that the popup feature is there for added security, but for my http://user:pass@host format bookmarks it's just annoying, not safe.

Is this still around in newer versions of Mozilla Firefox? If so I suggest you ask for blocking-aviary1.0.

*** Bug 276018 has been marked as a duplicate of this bug. ***

Please see my duplicate 276018. I am annoyed too by that paranoid dialog box. Please fix it.

(In reply to comment #5) > Not user:pass@host capability, but the popup warning telling "you are connecting > to host and user". see bug 232567 comment 72 for a hidden pref

*** This bug has been marked as a duplicate of 248945 ***

*** This bug has been marked as a duplicate of 243572 ***