How to disable confirmation dialog for user:pass sites?

[brainbeat]

Hello,
If I enter a site with the user/pass in the url such as "http://user:pass@website.com" FireFox gives me the dialog:

"You are about to log into the site "website.com" with the username "user" etc..."
Then it is required to hit 'OK' button to proceed.

My question is, is there anyway to disable this dialog (permanantly)?

Thanks in advance

[brainbeat]

::bump::
? still no one knows ?

[Guest]

I think its to stop some kind of spoofing attack such as
http://www.trustedbank.com@234.46.4.45 dont click that, I dont know where that leads.

[liru]

It would be interesting to find out. This tends to become annoying ....

Cheers

[joeblakesley]

It is also a security risk putting passwords in URIs (and doing so is deprecated by the URI standard)...

Anyway, there is <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=227414
">a bug requesting this behaviour be made less annoying</a> (that's Firefox--<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=243572">Mozilla bug</a> also). Also, a <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=247875">suggestion to replace this with a special colour location bar</a>.

There is a hidden preference to turn this off (<code>network.http.phishy-userpass-length</code>) but I cannot find it in Firefox 1.0.

addded: It says somewhere about putting <code>user_pref("network.http.phishy-userpass-length", 1024);</code> in <code>prefs.js</code> in <a href="http://kb-upgrade.mozillazine.org/index.php/Profile_Folder#Firefox">your profile folder</a>. Try that. I've gotta go.

[Guest]

i feel like this deserves another bump, so
::BUMP::

[jbergstr]

To accomplish this, you can also use the about:config method:

1. Type about:config on the location bar and press Enter.
2. Right-click in the empty space and select New|Integer.
3. Input network.http.phishy-userpass-length as the name and 1024 as the value.

Now FF will no more ask about logging in on a site.

[brainbeat]

To accomplish this, you can also use the about:config method:

1. Type about:config on the location bar and press Enter.
2. Right-click in the empty space and select New|Integer.
3. Input network.http.phishy-userpass-length as the name and 1024 as the value.

Now FF will no more ask about logging in on a site.

It worked! That's fantastic!
Thanks a million jbergstr!