2024-04-18 13:24 BST

View Issue Details Jump to Notes ]
IDProjectCategoryView StatusLast Update
0002600NetSurf[All Projects] Generalpublic2019-02-16 18:14
ReporterJim Nagel 
Assigned To 
SeverityminorReproducibilityalways 
StatusclosedResolutionunable to reproduce 
PlatformArmX6, ArminiOSRiscOSOS Version5.23
Product Version3.8 
Target VersionFixed in Version 
Summary0002600: authentication dead-end for site asking password but no username
DescriptionThis site requires a password but does NOT ask for a username. The Netsurf authentication dialogue seems unable to cope with this and keeps repeating itself. By contrast, the Android or Firefox authentication dialogues duly ask for only the password.
Additional InformationI obviously don't want to publish the password publicly, but if a developer has time to look into this, please email me and I'll tell you privately. Thanks.
TagsNo tags attached.
Fixed in CI build #
Reported in CI build #4316
URL of problem pagewww.ben-simone.com
Attached Files

-Relationships
+Relationships

-Notes
Vincent Sanders

~0001793

Vincent Sanders (administrator)

The domain to the website you specified does not resolve and you provided no log

I cannot see how password without a username can be done with basic authentication so it is important to examine what the site is trying to do.
Vincent Sanders

~0001805

Vincent Sanders (administrator)

From: Jim Nagel

Have always thought, though, that it'd be nicer if Netsurf gave some message when a login is unsuccessful, rather than just repeat the identical dialogue, which the user can feel is an infinite loop.

Some months ago I reported a site that asked for ONLY a password, WITHOUT a username. Netsurf failed but other browsers coped, giving a reduced dialogue box. (That site, for a wedding now past, now gives only an "under construction" page, but other examples might exist at www.squarespace.com where it was hosted.)
Daniel Silverstone

~0001883

Daniel Silverstone (administrator)

Hi Jim,

Unfortunately we cannot reproduce this and cannot determine any mechanism whereby a 401 login prompt might be induced which could not also involve a username.

I wonder if this is JavaScript related instead, however we cannot find any site matching your description for us to try. If you find another, please reopen this bug.
+Notes

-Issue History
Date Modified Username Field Change
2018-05-14 11:45 Jim Nagel New Issue
2018-07-20 15:18 Michael Drake Status new => acknowledged
2018-08-09 14:20 Vincent Sanders Note Added: 0001793
2018-08-09 14:20 Vincent Sanders Status acknowledged => feedback
2018-08-09 14:20 Vincent Sanders Product Version => 3.8
2018-08-19 13:11 Vincent Sanders Status feedback => acknowledged
2018-08-19 13:11 Vincent Sanders Note Added: 0001805
2019-02-16 18:14 Daniel Silverstone Status acknowledged => closed
2019-02-16 18:14 Daniel Silverstone Resolution open => unable to reproduce
2019-02-16 18:14 Daniel Silverstone Note Added: 0001883
+Issue History