Test case 15192
Firefox / Mozilla HTTP authentication focus, corresponding to CVE-2005-0584.
Vulnerability summary
Firefox before 1.0.1 and Mozilla before 1.7.6, when displaying the HTTP Authentication dialog, do not change the focus to the tab that generated the prompt, which could facilitate spoofing and phishing attacks.
What this test case checks
This test case documents a UI-trust issue in Firefox before 1.0.1 and Mozilla before 1.7.6 where an HTTP Authentication prompt did not raise focus to the tab that triggered it. A background tab could pop a credentials dialog that appeared to belong to the foreground tab. The pattern is a recurring theme in browser security: the security boundary is at the wrong layer.