[wp-trac] [WordPress Trac] #50131: Absent custom favicon triggers wp-admin .htaccess/.htpasswd prompt on frontend in FIrefox

[WordPress Trac]

#50131: Absent custom favicon triggers wp-admin .htaccess/.htpasswd prompt on
frontend in FIrefox
--------------------------+-------------------------------
 Reporter:  finomeno      |      Owner:  (none)
     Type:  defect (bug)  |     Status:  new
 Priority:  normal        |  Milestone:  Awaiting Review
Component:  General       |    Version:  5.4.1
 Severity:  major         |   Keywords:  reporter-feedback
  Focuses:                |
--------------------------+-------------------------------
 When there is no favicon set for a website and an extra security layer is
 set up on the /wp-admin/ directory with .htaccess and .htpasswd, Firefox
 shows the login prompt on the site's frontend when the browser issues a
 GET request to load /wp-admin/images/w-logo-blue.png as a default/fallback
 favicon. Clicking on 'Cancel' dismisses the prompt, and the GET request
 receives a '401 Unauthorised' response. The WP logo favicon isn't loaded
 then. Curiously, this doesn't seem to affect Chrome and other Chromium
 based browsers.

 I understand that this is a particular use case, but since setting up a
 favicon is optional and many sites don't do it, while setting up the extra
 protection on their /wp-admin/ (indeed, some hosting providers do that by
 default), this might significantly degrade user experience and even drive
 users away from websites.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/50131>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform