Bug 37992
| Summary: | no userid/pw prompt when using sync XHR | ||
|---|---|---|---|
| Product: | WebKit | Reporter: | Patrick Mueller <pmuellr> |
| Component: | WebCore Misc. | Assignee: | Nobody <webkit-unassigned> |
| Status: | RESOLVED DUPLICATE | ||
| Severity: | Normal | ||
| Priority: | P2 | ||
| Version: | 528+ (Nightly build) | ||
| Hardware: | PC | ||
| OS: | OS X 10.5 | ||
| URL: | http://www.mnot.net/javascript/xmlhttprequest/ | ||
Patrick Mueller
The problem is that when using XHR to a same-origin URL which uses basic auth, where the current page did not, and if the XHR is sync instead of async, then the user is never prompted for a password. Instead, the content for the request (in one case, boilerplate from the server talking about the basic auth issue) are returned in the XHR response.
This bug was initially reported against Chrome in this bug:
http://code.google.com/p/chromium/issues/detail?id=36268
However, newer versions of Chrome do not exhibit the problem. The latest version of WebKit nightly - r58082 on Mac - does still exhibit the problem.
The problem can be tested with the URL provided in the URL field above, specifically:
http://www.mnot.net/javascript/xmlhttprequest/
Scroll down to the "Authentication" section near the bottom, and WITHOUT following the link it says to follow first, just press the "run test" button for the "Sync" case. No prompt, and listed as fail. Clicking on the "run test" Async flavor does prompt.
| Attachments | ||
|---|---|---|
| Add attachment proposed patch, testcase, etc. |
Alexey Proskuryakov
*** This bug has been marked as a duplicate of bug 8342 ***