490506 - mixed content not detected despite http image in window

Status: RESOLVED DUPLICATE of bug 135007

(Core :: Security: PSM, defect)

Description

[Nelson Bolyard (seldom reads bugmail)]

Using FF 3.0.10 on Windows 

https://www.meebo.com/ is an EV site that has mixed content, including
two images loaded from http: URLs, but does not show any of the usual 
mixed content warnings.  The lock icon looks normal, and the address 
bar shows the words "Meebo, Inc. (US)" on a green-ish background.  
In other words, it's the full EV UI, despite the presence of http content 
on screen.  

If you're wondering, right in the middle of the page is an image of a white
letter "F" against a cyan background.  That's loaded from 
http://static.ak.fbcdn.net/images/fbconnect/login-buttons/connect_white_small_short.gif

The page also contains a background image loaded from 
http://share.meebo.com/imthis/img/button-blue.png

Comment 1

[Johnathan Nightingale [:johnath]]

Pretty sure this is a dup of bug 135007.  This is fixed on trunk as well as 1.9.1 (aka Firefox 3.5) but the fix was not backported to 3.0.x.  It's a painfully old bug, it was nice to see it fixed.