271051 - Address bar should use another color when lock icon is broken (https page with mixed content)

Status: RESOLVED FIXED

(Firefox :: Security, enhancement)

Description

[Dan Fischbach]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8a5) Gecko/20041120 Firefox/0.9.1+
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8a5) Gecko/20041120 Firefox/0.9.1+

Go to https://support.swishzone.com/unlock.asp  You'll notice that the site is
unsecure.  With the default theme, the only difference between a secure site and
a nonsecure site, is the slash through the padlock icon.  Would it be possible
for the location bar to turn red with white lettering to let the user know that
they're on an unsecure site?  With themes like Noia 2.0 eXtreme, the lettering
turns red on a white background, which is more noticable.  Just a thought.

Reproducible: Always
Steps to Reproduce:
1. Go to the site listed
2. Notice the "unsecure site" icon
3. Consider this bug

Comment 1

[Dan Fischbach]

This seems to be fixed in 1.0.1?

Comment 2

[Daniel Veditz [:dveditz]]

What theme are you using? It's not fixed by default in 1.0.1

Comment 3

[Dan Fischbach]

Ignore above post.  I just figured they would fix this in 1.0.1 since it's
security related.  At least it's fixed in nightlies I think....

Comment 4

[Ryan Hill]

no, it hasn't been changed in the nightlies.

Comment 5

[Dan Fischbach]

Yeah, my bad.  It was the theme I was using.

Comment 6

[Mike Connor [:mconnor]]

We can style this better, not a blocker though.

Comment 7

[Kevin Gerich]

Attachment: get rid of yellow URLbar background on "broken" websites

Comment 8

[Mike Connor [:mconnor]]

Comment on attachment 192251 [details] [diff] [review]
get rid of yellow URLbar background on "broken" websites

Yeah, simple, I like this.

Comment 9

[IU]

This patch has broken something.  Now if you click a link that takes you to
mixed content, the address bar turns white and the lock has a slash through it;
however, if you hit the back button to go back, and continue navigating the
secure site, the address bar remains white with the lock having a slash through
it, until you hit refresh.

Here's a demonstration:
1. go to http://www.tdcanadatrust.com/
2. Click the "Now" button at the top right, with EasyWeb in the drop-down
Notice: The address bar turned yellow.
3. Click the "Markets & Research" link at the top
Notice: The address bar turned white with a slash through the padlock
4. Click the "Back" toolbar button
Notice: The address bar is still white with a slash through the padlock.  From
here, every link you click (e.g. "Customer Service" or "Products & Services")
within the secure site will still display this state.  Only if you refresh (i.e.
click refresh or press P5) will it turn back yellow.