1656462 - Can't download .iso image from https://xcp-ng.org/

Status: RESOLVED DUPLICATE of bug 1654139

(Core :: DOM: Security, defect)

Description

[bpgarman]

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.89 Safari/537.36 Edg/84.0.522.48

Steps to reproduce:

Visit site, find download link to http://mirrors.xcp-ng.org/isos/8.1/xcp-ng-8.1.0-2.iso

Actual results:

nothing

Expected results:

download started

Comment 1

[Tom S. (please needinfo tschuster)]

Probably bug 1614969? HTTPs page pointing to a HTTP download link. For some reason this actually seems to download for me though ..

Comment 2

[bpgarman]

Maybe a different mirror upgrades the request? I get a 302 to
scheme
http
host
mirror.aarnet.edu.au
filename
/pub/xcp-ng/isos/8.1/xcp-ng-8.1.0-2.iso

Comment 3

[BugBot [:suhaib / :marco/ :calixte]]

Set release status flags based on info from the regressing bug 1614969

Comment 4

[Julien Cristau [:jcristau] (back August 18)]

dom.block_download_insecure is nightly only right now.

Comment 5

[Clara Guerrero ( Need Info Brindusa Tot Please)]

Hi,

I am also not able to replicate the issue. I've tried on windows10 pro

On the following versions:
release 79.0
beta, 80.0b4 (64-bit)
nightly 81.0a1 (2020-08-05) (64-bit)

When entering download link, it starts downloading 575 mb (approximately 2 hours)

Please test if the issue occurs to you in safe mode (add-ons disabled). Here is a link that can help you do that:
https://support.mozilla.org/en-US/kb/troubleshoot-firefox-issues-using-safe-mode

If the issue persists, also test it using a fresh profile, you can find the steps to do that below:
https://support.mozilla.org/en-US/kb/profile-manager-create-and-remove-firefox-profiles?redirectlocale=en-US&redirectslug=Managing-profiles#w_starting-the-profile-manager

Also, try this on the latest version of nightly. You can download it from here: https://nightly.mozilla.org/

I will move this over to a component so developers can take a look over it. If is not the correct component please feel free to change it to an appropriate one.

Thanks for the report.

Best regards, Clara.

Comment 6

[Marco Bonardo [:mak]]

yes it looks like at every try it may work or not, depending on the picked mirror, some are https, some are http.
When it fails it's because of the mixed content blocker.

Comment 7

[Christoph Kerschbaumer [:ckerschb]]

Basti, can you link that bug up correctly, so it's blocking the right bugs? Thanks!