Issue 3499: require username/password to load cached http pages which were  
sent with http-auth
http://code.google.com/p/chromium/issues/detail?id=3499

New issue report by [EMAIL PROTECTED]:
(marked NewHTTP but this applies to winhttp as well)

should probably persist some hash of the identity that was sent with the  
request in the disk cache
entry.

as things are currently, the page requiring http auth can be cached like a  
normal page, and doesn't
require the original username/password to be present to access it.

this feature wouldn't really improve security (since disk cache would still  
be unencrypted), but it
would prevent glitches when different username/passwords trigger different  
content.

should investigate what mozilla does.


Issue attributes:
        Status: Available
        Owner: ----
        Labels: Type-Bug Pri-2 OS-All Area-BrowserBackend NewHTTP

-- 
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred this issue.
You may adjust your issue notification preferences at:
http://code.google.com/hosting/settings

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Chromium-bugs" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/chromium-bugs?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to