HTTPS enforcement broken for page resources

Bug reports and enhancement requests
Meee
Posts: 8
Joined: Tue Jul 07, 2015 5:19 am

Re: HTTPS enforcement broken for page resources

Post by Meee »

Meee wrote:On a side note, informaction.com is now all-HTTPS (including HSTS), so it can no longer be used to test this issue.
Note that the above quote seems to no longer be true in current Firefox and NoScript versions. https://www.informaction.com/ does not load resources with "security.mixed_content.block_display_content" set to "true" in about:config and ".informaction.com" configured for HTTPS enforcement in NoScript. Even though HSTS is configured, according to https://www.ssllabs.com/ssltest/analyze ... action.com.

Firefox 49.0.2 as provided by Linux Mint, 64-bit. NoScript 2.9.0.14 from the official Mozilla addon repository.

Browser Console shows ("http" changed to "hxxp" to pass the forum filter):
Blocked loading mixed active content “hxxp://www.informaction.com/data/oss.css”[Learn More]www.informaction.com
Blocked loading mixed display content “hxxp://www.informaction.com/data/iasw.jpg”[Learn More]www.informaction.com
Blocked loading mixed display content “hxxp://www.informaction.com/data/flashgot/logo.png”[Learn More]www.informaction.com
Blocked loading mixed display content “hxxp://www.informaction.com/data/noscript/nosc ... -small.png”[Learn More]www.informaction.com
Blocked loading mixed display content “hxxp://www.informaction.com/data/spedifax/logo.png”[Learn More]www.informaction.com
Blocked loading mixed display content “hxxp://www.informaction.com/data/pop3trap/logo.png”[Learn More]www.informaction.com
Blocked loading mixed display content “hxxp://www.informaction.com/data//badge-flashgot.png”[Learn More]www.informaction.com
Blocked loading mixed display content “hxxp://www.informaction.com/data//badge-noscript.png”[Learn More]www.informaction.com
Blocked loading mixed display content “hxxp://www.informaction.com/data/donate2.gif”[Learn More]www.informaction.com
Mozilla/5.0 (Windows NT 6.1; rv:49.0) Gecko/20100101 Firefox/49.0
Post Reply