New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 777184 link

Starred by 1 user

Issue metadata

Status: WontFix
Owner: ----
Closed: Oct 2017
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Windows
Pri: 2
Type: Bug-Regression



Sign in to add a comment

Chrome is unable to perform login on some (insecure http) Webpages

Reported by ulf.gebh...@webcraft-media.de, Oct 22 2017

Issue description

UserAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.62 Safari/537.36

Example URL:
http://pr0gramm.com/top

Steps to reproduce the problem:
1. Go to a (insecure) Webpage's login
2. Enter your credentials
3. Press login
4. After (automatic) reload you are not logged in

What is the expected behavior?
One should be able to login properly

What went wrong?
Login was not performed properly.
User is not logged in.

Did this work before? Yes ~32 or below

Chrome version: 62.0.3202.62  Channel: stable
OS Version: 10.0
Flash Version: 

This issue is reproducable for at least two pages - both are insecure (http).

The Problem does not occur using Tor Browser. Therefore it must be a Browser Issue.

I deleted Cache & Cookies - no change.

Problem with this Report - the provided Webpage does not allow to register, you need to be invited - looking for someone able to reproduce this issue on a public/test page.

Browser is on Beta Channel, Latest Version (62).

There is one issue reporting Problems with Transmission of Cookies on post requests - no clue if that is the Issue.
> https://bugs.chromium.org/p/chromium/issues/detail?id=772392
 
pr01.png
1.4 MB View Download
pr02.png
648 KB View Download
pr03.png
621 KB View Download
I am able to login on https://pr0gramm.com/ so its definitly a Problem with http vs https.

For this page its solvable, but for other Pages which do not provide a secure layer it prevents me from logging in.
Labels: Needs-Bisect Needs-Triage-M62
Cc: sc00335...@techmahindra.com
Labels: Triaged-ET Needs-Feedback
Navigated to http://pr0gramm.com/top and tried registering. Unable to register as this requires payment to complete process.

@Reporter: Could you please let us know any other sites where this issue is seen or please give sample cresentials to Login for further triaging. 

Thanks!
I'm sorry, i cannot provide another site.

"Problem with this Report - the provided Webpage does not allow to register, you need to be invited - looking for someone able to reproduce this issue on a public/test page."

I have this Problem on two occasions, one is strictly private the other one i linked.

http://pr0gramm.com/ allows registered users to invite others for free. Send me an EMail and i will invite you so you can test.
Project Member

Comment 5 by sheriffbot@chromium.org, Oct 23 2017

Labels: -Needs-Feedback
Thank you for providing more feedback. Adding requester "sc00335628@techmahindra.com" to the cc list and removing "Needs-Feedback" label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Comment 6 by mmenke@chromium.org, Oct 23 2017

Cc: mkwst@chromium.org
Components: -Internals>Network Internals>Network>Cookies
Chrome doesn't let you overwrite cookies flagged as secure with insecure ones.  Without logging into the site, I can't confirm that, but it's almost certainly what's happening.  Chrome is, to the extent of my knowledge, the only browser to currently implement the spec about doing this.
Deleted all my cookies,
Deleted Cookies on Site

-> No change in behaviour

Comment 8 by hdodda@chromium.org, Oct 24 2017

Cc: hdodda@chromium.org
Labels: Needs-Feedback
@ ulf.gebhardt-- Could you please provide access to the following emaild id :

test.dodda@gmail.com

Thanks!
Invite is raus! ;-)
Project Member

Comment 10 by sheriffbot@chromium.org, Oct 24 2017

Labels: -Needs-Feedback
Thank you for providing more feedback. Adding requester "hdodda@chromium.org" to the cc list and removing "Needs-Feedback" label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Comment 11 Deleted

Cc: susanjuniab@chromium.org
Labels: Needs-Feedback
ulf.gebhardt@ Thanks for the feedback..
Was able to create an account on the site with the link provided via mail.

Tested this issue again on Windows 7, Mac OS 10.12.6 and Ubuntu 14.04 on the latest Stable 62.0.3202.62 and Canary 64.0.3248.0 following the below steps.

1. Launched Chrome and navigated to http://pr0gramm.com/top.
2. Clicked on Sign In link and gave in the credentials to login to the site.
3. Was able to login without any issues.
Attached is the screen cast for reference.

Request you to please retry the issue on a new chrome profile without any flags/extensions and update the thread with the observations.

Thanks...
777184.webm
10.9 MB View Download
Interesting.

I cannot reproduce this behaviour.

I used a guest Profile with no Extensions enabled. Still was not able to login into this Page on the http layer.

Any Clues why it could behave that way?
2017-10-25 13-53-27.mp4
13.5 MB View Download
Project Member

Comment 14 by sheriffbot@chromium.org, Oct 25 2017

Labels: -Needs-Feedback
Thank you for providing more feedback. Adding requester "susanjuniab@chromium.org" to the cc list and removing "Needs-Feedback" label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Running as Administrator does not change a thing - guess its not filepermissions
Labels: -Needs-Bisect
ulf.gebhardt@ Thanks for the feedback.

Re-tested this issue on Windows 7,10 and Mac OS 10.12.6 using the latest Stable 62.0.3202.62 and Canary 64.0.3250.0 and unable to reproduce the issue.
Followed the steps mentioned in comment #12 in Guest profile as well and no issues were observed while logging into the site.
Attached is the screen cast for reference.

Removing the 'Needs-Bisect' label as the issue is not reproducible at TE end.

Requesting someone from Internals>Network>Cookies team to please look into this issue and help in further triaging.

Thanks.
777184_Guest.webm
5.7 MB View Download
I apologize, the behaviour is reproducable in my whole Network and might be a side effect of a missconfigurated proxy from my ISP.

Sorry for wasting your time - it not a problem limited to Chrome but present on the Whole network - probl. a surveillance method and its unintended sideeffects.

Please Close!

Thanks, Ulf
Status: WontFix (was: Unconfirmed)
As per comment #17, closing the issue as wontFix.
Thanks...!!

Sign in to add a comment