Mixed content: Firefox does not display/play videos from an insecure source on a secure website
Categories
(Core :: Security, defect)
Tracking
()
People
(Reporter: atharva.rjagtap, Unassigned)
Details
User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:72.0) Gecko/20100101 Firefox/72.0
Steps to reproduce:
I made a website which uses https but the videos that are hosted on the website aren't using https .
Actual results:
When I published the website and opened the website in the browser , the video didn't appear . Even the thumbnail wasn't displayed. I fixed the problem by hosting my using https.
Expected results:
The default and expected behavior is to display a warning and not block the video.
The warning was displayed in the browser console but the video was also blocked from loading which shouldn't happen.
| Comment hidden (offtopic) |
| Comment hidden (offtopic) |
|
||
Comment 3•6 years ago
|
||
(In reply to atharva.rjagtap from comment #0)
The default and expected behavior is to display a warning and not block the video.
Indeed that should be the default behavior according to https://support.mozilla.org/en-US/kb/mixed-content-blocking-firefox : "By default, Firefox does not block mixed passive content", if you have not chosen to "Disable protection for now"...
|
||
Comment 4•6 years ago
|
||
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0
20200107212822
Please provide a link that shows the problem. The video will not work if it relies on active content, or if you set security.mixed_content.block_display_content to true in about:config
Works for me as follows:
- https://www.w3schools.com/html/tryit.asp?filename=tryhtml_default
- Replace the h1 and p lines with
<video controls src="http://clips.vorwaerts-gmbh.de/big_buck_bunny.mp4"> - Click the Run button.
|
|
||
Updated•6 years ago
|
Description
•