Fx 24 mixed content detection is not force https aware

Bug reports and enhancement requests
Post Reply
al_9x
Master Bug Buster
Posts: 931
Joined: Thu Mar 19, 2009 4:52 pm

Fx 24 mixed content detection is not force https aware

Post by al_9x » Sun Oct 27, 2013 6:06 am

Fx 17.0.10ESR & 24.0.0ESR, NS 2.6.8.4

test mixed content page

Fx 17, when ie.microsoft.com is https forced, sees the page as not mixed (i.e. secure), showing the padlock in the urlbar (mixed pages have no padlock).

Fx 24, sees it as mixed and still blocks a script. If blocking is turned off (security.mixed_content.block_active_content=false), it loads the script and still sees the page as mixed (no padlock)

for https forcing to be useful, it should affect Fx mixed detection. Perhaps this requires a change in Fx.
Mozilla/5.0 (Windows NT 5.1; rv:24.0) Gecko/20100101 Firefox/24.0

User avatar
Giorgio Maone
Site Admin
Posts: 8829
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: Fx 24 mixed content detection is not force https aware

Post by Giorgio Maone » Mon Oct 28, 2013 8:36 pm

Investigating, thanks.
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Firefox/24.0

Post Reply