Closed Bug 1662138 Opened 4 years ago Closed 4 years ago

"save link as..." On mixed content downloads is Silently blocked

Categories

(Core :: DOM: Security, defect, P2)

defect

Tracking

()

RESOLVED FIXED
86 Branch
Tracking Status
firefox-esr68 --- unaffected
firefox-esr78 --- unaffected
firefox80 --- unaffected
firefox81 --- disabled
firefox82 --- disabled
firefox83 --- disabled
firefox84 --- disabled
firefox85 --- disabled
firefox86 --- fixed

People

(Reporter: sstreich, Assigned: sstreich)

References

(Blocks 1 open bug, Regression)

Details

(Keywords: regression, Whiteboard: [domsecurity-active])

Attachments

(1 file)

Right Clicking on a link and selecting "save link as" on a mixed content download link, silently cancels. This should give the user the same notification as if this was a general mixed-content download.

Assignee: nobody → sstreich
Priority: -- → P2
Summary: "save link as..." On mixed content download Silently blocks → "save link as..." On mixed content downloads is Silently blocked
Whiteboard: [domsecurity-active]
See Also: → 1662359

Set release status flags based on info from the regressing bug 1655719

(dom.block_download_insecure is set to false on beta/release)

Severity: -- → S3

Is this still an issue after bug 1660969 was fixed?

Status: NEW → ASSIGNED

(In reply to Mathew Hodson from comment #4)

Is this still an issue after bug 1660969 was fixed?

Flags: needinfo?(sstreich)

Sadly yes, this kind of block happens before the download ui is invoked :( - working on it rn

Flags: needinfo?(sstreich)
Pushed by rmaries@mozilla.com: https://hg.mozilla.org/integration/autoland/rev/6801d25be0c2 Do not rely on Type::SaveAs for MCB download check r=ckerschb
Status: ASSIGNED → RESOLVED
Closed: 4 years ago
Resolution: --- → FIXED
Target Milestone: --- → 86 Branch
Regressions: 1685580
Has Regression Range: --- → yes
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: