Closed Bug 358118 Opened 18 years ago Closed 18 years ago

upon "restart firefox", firefox doesn't verify my identity

Categories

(Toolkit :: Password Manager, defect)

x86
Windows XP
defect
Not set
major

Tracking

()

RESOLVED DUPLICATE of bug 358042

People

(Reporter: ercolev, Unassigned)

Details

(Whiteboard: [sg:dupe 358042])

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1) Gecko/20061010 Firefox/2.0 Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1) Gecko/20061010 Firefox/2.0 I forcefully shut down my PC and restarted. Upon opening Firefox, it asked me if I wanted to restart it to its previous state (load tabs, content). My Gmail account was reopened by Firefox without Password Manager asking me to verify my identity. Not only did Firefox assume I was the same person who had crashed it (which is a big safety problem, specially if public computers are being used), but it also automatically logged me into my email and was showing my Inbox. My only concern with this is that someone may crash my computer, restart my browser, and steal my identity. The way of fixing this problem would be to make the user verify his/her identity if the reloaded tabs contain any websites for which the user must identify his/herself. If the user doesn't have Password Manager, then the Firefox must prompt them to the sign-in page instead. Reproducible: Didn't try Steps to Reproduce: 1. Physically forced computer to shutdown 2. Turned computer on, opened Firefox 3. Accepted Firefox's option to restart to my previous state 4. Firefox loaded my personal email account without verifying my identity.
*** This bug has been marked as a duplicate of 358042 ***
Status: UNCONFIRMED → RESOLVED
Closed: 18 years ago
Resolution: --- → DUPLICATE
Whiteboard: [sg:dupe 358042]
Group: security
Product: Firefox → Toolkit
You need to log in before you can comment on or make changes to this bug.