Closed
Bug 724465
Opened 13 years ago
Closed 13 years ago
Http referer on a plugin initiated post request is causing a Http/400 from IIS
Categories
(Core Graveyard :: Plug-ins, defect)
Tracking
(firefox11 unaffected, firefox12 unaffected, firefox13+ verified)
VERIFIED
FIXED
mozilla13
Tracking | Status | |
---|---|---|
firefox11 | --- | unaffected |
firefox12 | --- | unaffected |
firefox13 | + | verified |
People
(Reporter: mackeev, Assigned: benjamin)
References
Details
(Keywords: regression, Whiteboard: [qa!])
Attachments
(3 files)
(deleted),
text/plain
|
Details | |
(deleted),
patch
|
jaas
:
review+
|
Details | Diff | Splinter Review |
(deleted),
patch
|
Details | Diff | Splinter Review |
User Agent: Mozilla/5.0 (Windows NT 6.1; rv:12.0a2) Gecko/20120205 Firefox/12.0a2
Build ID: 20120205042013
Steps to reproduce:
After updating to 12a2 from 11a2:
Tried to log into my Sip Sorcery account via their Silverlight portal (http://www.sipsorcery.com/mainsite/Home/Portal)
Actual results:
The dot in the upper left corner turned red (should be green)
I entered my login and password and got an error logging in
Expected results:
The dot initially should be green and I should be able to log in.
Comment 1•13 years ago
|
||
It works if network.http.sendRefererHeader set to 0 or 1.
Reporter | ||
Comment 2•13 years ago
|
||
Yes! I've changed it to 1 and it works again.
Thank you.
Updated•13 years ago
|
Keywords: regression
Comment 3•13 years ago
|
||
It looks like a bug in the site if just disabling the referer of the embed object makes it work.
Can someone contact them, maybe Igor ?
Reporter | ||
Comment 4•13 years ago
|
||
There is nothing wrong with the site. The same problem had been reported a bit earlier with another site.
And I found a new one:http://services.biathlonresults.com/Live.aspx (works fine with 1)
Everything that has Silverlight in it looks broken.
Comment 5•13 years ago
|
||
I used http://services.biathlonresults.com/Live.aspx for testing and I can confirm this issue with Seamonkey trunk on win32.
Seamonkey gets a HTTP 400 "Bad Request (Invalid Header Name)" after a HTTP post that includes the referer. I'm not sure why it shouldn't be valid to send the referer here but Opera11.6 doesn't send a referer for Post requests initiated by the Plugin.
I bet that removing the referer from the post request will fix all regressions from bug 410904
I will attach a wireshark snippet that shows the post requests from FF10,SM trunk and Opera11.60
I'm requesting tracking because this seems to break many silverlight pages.
Look at the depending bugs of bug 410904
status-firefox11:
--- → unaffected
status-firefox12:
--- → affected
status-firefox13:
--- → affected
tracking-firefox12:
--- → ?
Component: Untriaged → Plug-ins
Product: Firefox → Core
QA Contact: untriaged → plugins
Comment 6•13 years ago
|
||
Updated•13 years ago
|
tracking-firefox13:
--- → ?
Updated•13 years ago
|
Summary: Silverlight login broken in Aurora 12a2 → Http referer on a plugin initiated post request is causing a Http/400 from IIS
Updated•13 years ago
|
Assignee | ||
Comment 8•13 years ago
|
||
Josh, I think we should disable referrers for plugin POSTs to fix this issue. Do you disagree?
Assignee: nobody → benjamin
Assignee | ||
Comment 10•13 years ago
|
||
Attachment #597831 -
Flags: review?(joshmoz)
Assignee | ||
Comment 11•13 years ago
|
||
Attachment #597831 -
Flags: review?(joshmoz) → review+
Assignee | ||
Comment 12•13 years ago
|
||
Comment 13•13 years ago
|
||
https://hg.mozilla.org/mozilla-central/rev/cabba131ae45
https://hg.mozilla.org/mozilla-central/rev/af615c25e502
Status: NEW → RESOLVED
Closed: 13 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla13
Updated•13 years ago
|
Assignee | ||
Comment 14•13 years ago
|
||
Comment on attachment 597831 [details] [diff] [review]
Don't send Referer with plugin POST requests, rev. 1
This patch reverts to the prior behavior for POST requests only, and should be fairly safe.
Attachment #597831 -
Flags: approval-mozilla-aurora?
Comment 19•13 years ago
|
||
this bug fixed don't solve all problem, if you ever test...
Most of the video playing problem is GET, not POST, why not follow other browser send the plugin itself as referer? That solve all issue for once and all.
Assignee | ||
Comment 20•13 years ago
|
||
That's not what this bug is about. If you need to file a bug specifically about the GET issue, please do it separately with a testcase/testcase URL.
Comment 21•13 years ago
|
||
Comment on attachment 597831 [details] [diff] [review]
Don't send Referer with plugin POST requests, rev. 1
[Triage Comment]
Fixes silverlight breakage and deemed low risk - approved for Aurora 12.
Attachment #597831 -
Flags: approval-mozilla-aurora? → approval-mozilla-aurora+
Comment 22•13 years ago
|
||
Landing on Aurora 12 ping.
Comment 24•13 years ago
|
||
(In reply to Alex Keybl [:akeybl] from comment #22)
> Landing on Aurora 12 ping.
When it will land on Aurora 12?
Comment 25•13 years ago
|
||
> When it will land on Aurora 12?
(echo)
This also breaks some Japanese video sites:
http://streaming.yahoo.co.jp/guide/sample/?b=300
http://www.dmm.com/digital/-/player/=/action=sample/
We hope this would get fixed soon.
Assignee | ||
Comment 26•13 years ago
|
||
Bug 410904 was backed out of Aurora (FF12).
tracking-firefox12:
+ → ---
Comment 27•13 years ago
|
||
(In reply to Benjamin Smedberg [:bsmedberg] from comment #26)
> Bug 410904 was backed out of Aurora (FF12).
Confirmed those videos can now play w/o changing the referer pref.
Comment 28•13 years ago
|
||
Comment on attachment 597831 [details] [diff] [review]
Don't send Referer with plugin POST requests, rev. 1
clearing approval per bsmedberg's "gecko 12--> unaffected" comment and that this never landed there
Attachment #597831 -
Flags: approval-mozilla-aurora+
Comment 29•13 years ago
|
||
Comment on attachment 597832 [details] [diff] [review]
Test
Did you mean to include contents of test_pluginstream_referer.html/sjs? and/or did this patch land?
Attachment #597832 -
Flags: feedback?(benjamin)
Assignee | ||
Updated•13 years ago
|
Attachment #597832 -
Flags: feedback?(benjamin)
Comment 30•13 years ago
|
||
Pool Live Tour not working, bug 732371 on Firefox 12 beta 1
Assignee | ||
Comment 31•13 years ago
|
||
Bug 410904 was backed out of Firefox 12 train, so it cannot be the cause of this bug. Please reopen the other bug which is probably not a duplicate.
Comment 32•13 years ago
|
||
http://www.sipsorcery.com/mainsite/Home/Portal
https://indexes.nasdaqomx.com/
https://amarantisnoord.swp.nl/
are working fine, no errors/crashes occur.
This is verified fixed on FF 13b2:
Mozilla/5.0 (Windows NT 6.1; rv:13.0) Gecko/20100101 Firefox/13.0
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0
Updated•3 years ago
|
Product: Core → Core Graveyard
You need to log in
before you can comment on or make changes to this bug.
Description
•