[Bug 396117] [NEW] green ev ssl bar stays visible with wrong url on slow computer

[David Mandelberg]

Public bug reported:

Binary package hint: firefox-3.0

On a slow or overloaded computer, the green EV SSL bar stays visible for
a short time after switching tabs. There could be a slight security
risk, especially if the tab switched to is a phishing scam of the
previous tab.

Steps to reproduce:
  1. Open 2 tabs, one with EV SSL and one without. Switch to the one with.
  2. Make firefox run slowly so the bug is visible for long enough.
  3. Switch to the other tab.

What happens:
  1. URL changes to reflect the new tab and the new tab is highlighted on the tab bar
  2. EV SSL bar disappears

What should happen:
  1. EV SSL bar disappears
  2. URL changes and the new tab is highlighted

$ lsb_release -rd
Description:	Ubuntu 9.04
Release:	9.04

$ apt-cache policy firefox
firefox:
  Installed: 3.0.11+build2+nobinonly-0ubuntu0.9.04.1
  Candidate: 3.0.11+build2+nobinonly-0ubuntu0.9.04.1
  Version table:
 *** 3.0.11+build2+nobinonly-0ubuntu0.9.04.1 0
        500 http://us.archive.ubuntu.com jaunty-updates/main Packages
        500 http://security.ubuntu.com jaunty-security/main Packages
        100 /var/lib/dpkg/status
     3.0.8+nobinonly-0ubuntu3 0
        500 http://us.archive.ubuntu.com jaunty/main Packages

** Affects: firefox-3.0 (Ubuntu)
     Importance: Undecided
         Status: New

-- 
green ev ssl bar stays visible with wrong url on slow computer
https://bugs.launchpad.net/bugs/396117
You received this bug notification because you are a member of Mozilla
Bugs, which is subscribed to firefox-3.0 in ubuntu.