New issue
Advanced search Search tips

Issue 647803 link

Starred by 1 user

Issue metadata

Status: Verified
Owner:
Closed: Sep 2016
Components:
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: 1
Type: Bug
Team-Security-UX



Sign in to add a comment

Lock security indicator disappears on back navigation

Project Member Reported by elawrence@chromium.org, Sep 16 2016

Issue description

Version: 55.0.2862
OS: Win7

What steps will reproduce the problem?
(1) Visit Facebook or Twitter or Google Groups
(2) Click forward to a resource on the same origin
(3) Click back

Observe: Lock disappears.

Expect: Lock stays.

Doesn't happen on every HTTPS site, but many.

Looks different/broader than  crbug.com/647683  maybe because Google Groups doesn't appear to use pushState
 
IncognitoBack.png
56.8 KB View Download

Comment 1 by f...@chromium.org, Sep 16 2016

Owner: jam@chromium.org
Status: Assigned (was: Untriaged)
jam@: Since this involves a same-origin navigation, I'm suspecting this is related to https://codereview.chromium.org/2305093002/ & associated CLs.

Comment 2 by est...@chromium.org, Sep 22 2016

Eric, could you try reproducing this again now that the fix for  issue 647683  is in Canary? I tried but I couldn't reproduce it on FB/Twitter/Google Groups in the first place so I can't tell if it's been fixed or not.

Comment 3 by jam@chromium.org, Sep 22 2016

Sorry just saw this bug.

I can't reproduce this either. Eric: can you give exact steps (i.e. which links you clicked on)? Thanks
Status: Verified (was: Assigned)
This appears to have been fixed; I cannot reproduce in 55.0.2868.0. 

The bug described in the original report was incredibly easy to repro: Literally load Facebook, Twitter, or Google Groups to *any* HTTPS page, click *any* same-origin HTTPS link, and then hit back. The lock icon would disappear.
Attaching video of repro in 55.0.2866.0 for posterity
BackBreaksOriginChipLock.mov
2.9 MB Download
Components: -Security>UX UI>Browser>Omnibox>SecurityIndicators

Sign in to add a comment