[Webkit-unassigned] [Bug 37992] New: no userid/pw prompt when using sync XHR

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=37992

           Summary: no userid/pw prompt when using sync XHR
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: PC
               URL: http://www.mnot.net/javascript/xmlhttprequest/
        OS/Version: Mac OS X 10.5
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P2
         Component: WebCore Misc.
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: pmuellr at yahoo.com


The problem is that when using XHR to a same-origin URL which uses basic auth,
where the current page did not, and if the XHR is sync instead of async, then
the user is never prompted for a password.  Instead, the content for the
request (in one case, boilerplate from the server talking about the basic auth
issue) are returned in the XHR response.

This bug was initially reported against Chrome in this bug:

   http://code.google.com/p/chromium/issues/detail?id=36268

However, newer versions of Chrome do not exhibit the problem.  The latest
version of WebKit nightly - r58082 on Mac - does still exhibit the problem.

The problem can be tested with the URL provided in the URL field above,
specifically:

   http://www.mnot.net/javascript/xmlhttprequest/

Scroll down to the "Authentication" section near the bottom, and WITHOUT
following the link it says to follow first, just press the "run test" button
for the "Sync" case.  No prompt, and listed as fail.  Clicking on the "run
test" Async flavor does prompt.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.