71264 - Some insecure pages cause PSM to load

Status: VERIFIED INVALID

(Core Graveyard :: Security: UI, defect)

Description

[Warner Young]

Visiting the given URL causes PSM to load, even though there is no indication in
the UI that PSM has loaded, or that it's needed.  Sorry, I can't tell for sure
if this is a Mozilla bug, but I can't find anything obvious in the HTML code of
the problem page.

Also not sure what version of PSM, but it's from build 2001030704.

When viewing the same page in NS 4.x, Page Info claims it's an insecure
document, and the security (padlock) icon doesn't change state.

Comment 1

[Boris Zbarsky [:bzbarsky]]

From the page source:

!-- Begin Copyright -->
<tr><td COLSPAN="2">
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<img
src="https://www.icopyright.com/common/images/ic_sicon.gif" width=28 height=28
border=0 alt="Get Copyright Clearance" align=absmiddle>

Loading this image necessitates startup of PSM.

Marking invalid, since PSM _is_ needed to load all the content on the page. 
Once page info gets redone, it will hopefully even be possible to see there that
one of the images on the page is secure.

Comment 2

[John Unruh]

Verified invalid