| CARVIEW |
Select Language
HTTP/2 200
accept-ranges: bytes
content-type: text/html; charset=UTF-8
set-cookie: Bugzilla_login_request_cookie=DzW8JW0NOUvZ; path=/; secure; HttpOnly; SameSite=Lax
set-cookie: github_token=kvWhdRYntAAu2vOOwXLY7LdujT12oDwGyhNNxB8UamdFAo4QBu9M0mprak5giPx8dKknavOZyibrKKrRoV6XTwr3Cxk5H0IOE8VWtF25u8AIgm3Ds4VD2rgyicUjC9sDfM5BmqjbGB90gD9KcOqXgc0nS4BHx2QVduvut21CcXL0eSP6kvOoynlYdSeozp4C7iVvtgR3Xm15pJeg6Cn4bjGGBkmtmjDBntUJgBEBigmHrZ1rBPa1bwgwDDsDk5Lk; path=/; secure; HttpOnly; SameSite=Lax
via: 1.1 google, 1.1 varnish, 1.1 varnish
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: gzip
referrer-policy: same-origin
server: nginx
x-frame-options: SAMEORIGIN
content-security-policy: default-src 'self'; worker-src 'none'; connect-src 'self' https://product-details.mozilla.org https://treeherder.mozilla.org/api/failurecount/; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https://secure.gravatar.com https://bug1976974.bmoattachments.org/; media-src 'self' https://bug1976974.bmoattachments.org/; object-src 'none'; script-src 'self' 'nonce-9zfMdx8CJax73xRLqEnKe7YDbBtkIAsMsYNIuTnkdWCIWqFx' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; frame-src 'self' https://crash-stop-addon.herokuapp.com; frame-ancestors 'self'; form-action 'self' https://www.google.com/search https://github.com/login/oauth/authorize https://github.com/login https://phabricator.services.mozilla.com/ https://people.mozilla.org
date: Wed, 01 Oct 2025 04:29:11 GMT
x-served-by: cache-bom-vanm7210074-BOM, cache-bom-vanm7210085-BOM
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1759292951.542275,VS0,VE1217
vary: Accept-Encoding
1976974 - Webauthn Pin doesn't use UTF-8 and fails on any character larger than 1 byte
Closed
Bug 1976974
Opened 3 months ago
Closed 2 months ago
Webauthn Pin doesn't use UTF-8 and fails on any character larger than 1 byte
*
Summary:
Webauthn Pin doesn't use UTF-8 and fails on any character larger than 1 byte
Categories
(Core :: DOM: Web Authentication, defect, P3)
Tracking
()
RESOLVED
FIXED
RESOLVED
FIXED
143 Branch
Iteration:
---
| Webcompat Priority | |
| Accessibility Severity | |
| Performance Impact | |
| Webcompat Score | |
| a11y-review | |
| Size Estimate |
| Tracking | Status | |
|---|---|---|
| firefox143 | --- | fixed |
| Tracking | Status | |
|---|---|---|
| relnote-firefox | ||
| thunderbird_esr115 | ||
| thunderbird_esr140 | ||
| firefox-esr115 | ||
| firefox-esr140 | ||
| firefox143 | ||
| firefox144 | ||
| firefox145 |
People
(Reporter: markus.probst+dev, Assigned: markus.probst+dev)
References
Details
---
---
---
QA Whiteboard:
[qa-triage-done-c144/b143]
Has STR:
---
Change Request:
---
0
Bug Flags:
|
| ||||
Crash Data
Signature:
None
Security
(public)
This bug is publicly visible.
User Story
Attachments
(1 file)
User Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36
Steps to reproduce:
I have a character in my security key (yubikey) pin, that is in UTF-8 larger than 1-byte.
I then tried to register my yubikey on https://demo.yubico.com/webauthn-technical/registration and therefore entered my pin.
Actual results:
It said "Pin incorrect" although it was correct.
Expected results:
It should have proceeded.
|
Assignee | |
Comment 1•3 months ago
|
||
Attached file
Bug 1976974 - Use UTF-8 in WebAuthn with Pin
— Details
|
||
Comment 2•3 months ago
|
||
The Bugbug bot thinks this bug should belong to the 'Core::DOM: Web Authentication' component, and is moving the bug to that component. Please correct in case you think the bot is wrong.
Component: Untriaged → DOM: Web Authentication
Product: Firefox → Core
|
||
Updated•3 months ago
|
Assignee: nobody → markustieger
Status: UNCONFIRMED → ASSIGNED
Ever confirmed: true
|
|
||
Comment 3•2 months ago
|
||
The severity field is not set for this bug.
:jschanck, could you have a look please?
For more information, please visit BugBot documentation.
Flags: needinfo?(jschanck)
Pushed by jschanck@mozilla.com:
https://github.com/mozilla-firefox/firefox/commit/d5ec57f9adca
https://hg.mozilla.org/integration/autoland/rev/98ffa6bd89a9
Use UTF-8 in WebAuthn with Pin r=jschanck
|
||
Updated•2 months ago
|
Flags: needinfo?(jschanck)
|
|
||
Updated•2 months ago
|
Severity: -- → S3
Priority: -- → P3
|
||
Comment 5•2 months ago
|
||
| bugherder | ||
Status: ASSIGNED → RESOLVED
Closed: 2 months ago
status-firefox143:
--- → fixed
Resolution: --- → FIXED
Target Milestone: --- → 143 Branch
|
||
Updated•1 month ago
|
QA Whiteboard: [qa-triage-done-c144/b143]
You need to log in
before you can comment on or make changes to this bug.
Description
•