1348818 - Insecure password warning and HTTPS iframes

Status: RESOLVED DUPLICATE of bug 1334760

(Firefox :: Untriaged, defect)

Description

[paul.kohlhoff]

Attachment: warning.png

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36

Steps to reproduce:

Open latest version of firefox to http page with embedded https login form (in iframe). For example www.gamesensesports.com.

Refer to
https://support.mozilla.org/t5/Protect-your-privacy/Insecure-password-warning-in-Firefox/ta-p/27861


Actual results:

The password field shows the user an insecure warning (assuming because parent page is over http).


Expected results:

The password is still secure because its entered on a secure https form in an iframe.