Open Bug 1708638 Opened 4 years ago Updated 8 months ago

Write tests to ensure localhost URLs are handled properly within HTTPS-First Mode

Categories

(Core :: DOM: Security, task, P3)

task

Tracking

()

People

(Reporter: ckerschb, Unassigned)

References

(Blocks 1 open bug)

Details

(Keywords: good-first-bug, Whiteboard: [domsecurity-backlog1][lang=JS] )

Within Bug 1705340 we wrote tests for .onion but not for localhost. Mostly because localhost handling on TreeHerder seems not straightforward.

Severity: -- → S4
Blocks: 1921214
No longer blocks: https-first-mode

By now we have plenty of tests targeting localhost so there should be nothing preventing adding one.

The expected behavior is based on dom.security.https_first_for_local_addresses, if it's set to false we should not attempt to upgrade, if it's true we should.

Whiteboard: [domsecurity-backlog1] → [domsecurity-backlog1][lang=JS]
You need to log in before you can comment on or make changes to this bug.