Closed Bug 296645 Opened 19 years ago Closed 16 years ago

natwest.com, nwolb.com - closes itself when trying to log in, if window was opened by javascript

Categories

(Tech Evangelism Graveyard :: English Other, defect)

Product:
Tech Evangelism Graveyard
Component:
English Other
Type:
defect
Priority:
Not set
Severity:
major

Tracking

(Not tracked)

Status:
RESOLVED FIXED

People

(Reporter: sava_zxivanovich, Unassigned)

References

(
URL
)

Details

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.8) Gecko/20050511 Firefox/1.0.4 Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.8) Gecko/20050511 Firefox/1.0.4 If you log on mbna.co.uk site, unlog and go to natwest and try to log on this request is redirected to mbna.co.uk logon page (www.bankcardservices.co.uk). Reproducible: Always Steps to Reproduce: 1) www.mbna.co.uk 2) Log on (redirected to www.bankcardservices.co.uk) 3) Logout 4) go to www.natwest.co.uk 5) try to log on 6) request is redirected to www.bankcardservices.co.uk. Actual Results: Shows www.bankcardservices.co.uk Expected Results: Go to natwest logon page www.nwolb.com. Few addons? I don't know, but this is a very similar bug to one reported in 1.03.
Why filed against the "tabbed browser" component? Are tabs involved here somehow? Redirects are done by the server, isn't likely to be a browser bug. I couldn't reproduce, but I couldn't actually log on to the mbna server as I don't have an account.
Whiteboard: [sg:needinfo]
(In reply to comment #1) > Why filed against the "tabbed browser" component? Are tabs involved here somehow? > > Redirects are done by the server, isn't likely to be a browser bug. I couldn't > reproduce, but I couldn't actually log on to the mbna server as I don't have an > account. Maybe I didn't use appropriate terms. MBNA opens another tab when you try to log on. If you log on and then logg off and try to log on Natwest site in the same tab, log on request will go to mbna page, not natwest. I will ask Natwest and MNBA to help you. Regards, Sava
Maybe it is easier to solve this bug. It is not needed to have MBNA account. It seems that tab is not redirected, but closed?! 1) www.mbna.com/europe/index.html 2) press log on 3) new tab opens 4) https://www.bankcardservices.co.uk/NASApp/NetAccessXX/WelcomeScreen?country=uk&language=en&org=1 5) go to www.natwest.com 6) try to log on. 7) that tab will be closed 8) previous tab, www.mbna.com/europe/index.html will wait for https://www.nwolb.com
Even simpler steps to reproduce: 1. javascript:window.open("http://www.natwest.com/"); void 0 2. Click "log in" Result: the window closes. My initial guess is that natwest is closing itself. If that's true, it might be a bug or it might be trying to protect itself against another site having a reference to its window object in a bizarre way.
Summary: Redirected page → www.natwest.com closes itself when trying to log in, if window was opened by javascript
When you go to a URL like https://www.nwolb.com/secure/default.asp?refererident=91170117 with an opener, the site tries to open a new window with a different number in the URL (which fails because popups are blocked) and then immediately tries to close itself (which succeeds). If you go without an opener, it just replaces the URL with one with a different number in the URL. This is the source of the page: <html><script language="javascript"> var NoCookieMessage = '<H2>Your browser is not configured correctly</H2>'; NoCookieMessage += '<b>The browser you are using has cookies disabled.</b><br><br>NatWest OnLine Banking requires that you have at least non-persistent cookies turned on to meet its security requirements. '; NoCookieMessage += 'Non-persistent cookies are harmless text files stored temporarily in a special place on your computer and cannot contain viruses or harmful programs. '; NoCookieMessage += 'Non-persistent cookies are deleted when you exit, or close, your browser.'; NoCookieMessage += '<br><br><b>Please enable cookies from your browsers preferences and Logon again.</b><br><br>For assistance in turning on cookies, please contact the Helpdesk on 0845 60 50 789.'; NoCookieMessage += '<p>&nbsp;</p><p align=\'right\'><input id=\'buttonClose\' name=\'buttonClose\' type=\'button\' value=\'Close\' style=\'color=white;background-color= #0099ff;width=100; font-weight=bolder; curosr=hand; margin-right=100\' onclick=\'window.close();\'>'; if (document.cookie.search('TestCookie=80065175') == -1) document.write(NoCookieMessage); else {if (window.opener == null || typeof(window.opener) == 'undefined') window.document.location.href = 'https://www.nwolb.com/secure/default.asp?refererident=80065175'; else {window.open('https://www.nwolb.com/secure/default.asp?refererident=80065175','_blank','toolbar=no,menubar=no,location=no,status=yes,scrollbars=yes,resizable=yes,height=580,width=790,left=1,top=1'); window.close();}} </script></html> This is a dup of bug 297980 or evangelism, and not a security hole.
URL: https://www.nwolb.com/secure/default....
Group: security
Summary: www.natwest.com closes itself when trying to log in, if window was opened by javascript → natwest.com, nwolb.com - closes itself when trying to log in, if window was opened by javascript
Whiteboard: [sg:needinfo]
Component: Tabbed Browser → English Other
Product: Firefox → Tech Evangelism
-> Evangelism, English other (UK)
Depends on: 297980
Assignee: nobody → english-other
QA Contact: tabbed.browser → english-other
I can no longer reproduce comment 4 in Firefox 2, which seems to make this FIXED.
Status: UNCONFIRMED → RESOLVED
Closed: 16 years ago
OS: Windows XP → All
Hardware: PC → All
Resolution: --- → FIXED
Product: Tech Evangelism → Tech Evangelism Graveyard
You need to log in before you can comment on or make changes to this bug.