Skip to content

doc[http/guides/authentication/index.md]: Removed outdated description about firefox #40218

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
Jul 6, 2025

Conversation

samuel871211
Copy link
Contributor

Description

Test Locally with firefox 140.0.2, firefox does not show any warning message.

_2025_07_05_16_33_44_18.mp4
Firefox will warn the user with a prompt "You are about to log in to the site www.example.com with the username username, but the website does not require authentication. This may be an attempt to trick you."

This seems outdated, but I can't find the exact version firefox changed this behavior.

Motivation

Additional details

Related issues and pull requests

@samuel871211 samuel871211 requested a review from a team as a code owner July 5, 2025 08:37
@samuel871211 samuel871211 requested review from hamishwillee and removed request for a team July 5, 2025 08:37
@github-actions github-actions bot added Content:HTTP HTTP docs size/xs [PR only] 0-5 LoC changed labels Jul 5, 2025
Copy link
Contributor

github-actions bot commented Jul 5, 2025

Preview URLs

Flaws (3)

URL: /en-US/docs/Web/HTTP/Guides/Authentication
Title: HTTP authentication
Flaw count: 3

  • unknown:
    • No generic content config found
    • no blog root
    • no blog root

@github-actions github-actions bot added the size/s [PR only] 6-50 LoC changed label Jul 6, 2025
Copy link
Collaborator

@hamishwillee hamishwillee left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I can't find the bug in which it changed either (the string is still in the firefox repo here https://searchfox.org/mozilla-central/source/netwerk/locales/en-US/necko.properties)

IMO this is a blatant security breach, and I can see the URL is not sent for FF and Chrome in the browser and wireshark, so I'm pretty sure this is correct.

I have edited this a bit, because the part before the bit you changed was hinting you could still do this. At some point we probably should delete the whole section, but probably useful to have a period where we note that it can't be done anymore.

Thank you.

@hamishwillee hamishwillee merged commit c182f3c into mdn:main Jul 6, 2025
8 checks passed
@samuel871211 samuel871211 deleted the patch-1 branch July 7, 2025 00:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Content:HTTP HTTP docs size/s [PR only] 6-50 LoC changed size/xs [PR only] 0-5 LoC changed
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants