Closed
Bug 749946
Opened 12 years ago
Closed 2 years ago
Secured websites with mixed content display identity-box as not secured on first load and as secured after refresh
Categories
(Firefox :: Security, defect)
Tracking
()
RESOLVED
INCOMPLETE
People
(Reporter: zigboom, Unassigned)
References
Details
(Keywords: regression, Whiteboard: [psm-padlock])
Attachments
(1 file)
User Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:15.0) Gecko/20120427 Firefox/15.0a1 Build ID: 20120427030500 Steps to reproduce: Restart Browser with option to remember tabs from last time. Two tabs are open: Google and AMO (verified domain and verified identity). In Stylish there are User Styles for both that use images hosted on a normal HTTP so the result is mixed-content (HTTP and HTTPS). Actual results: On first load both website's identity-box display as not secured. After reloading the page the identity-box display as secure. Expected results: The identity-box should display as not secured (mixed content) also on second load.
Severity: normal → major
Component: Untriaged → Security
Hardware: x86 → x86_64
It would be helpful if you could provide exact URLs to try this on and Stylish configuration settings.
(In reply to KLB from comment #1) > It would be helpful if you could provide exact URLs to try this on and > Stylish configuration settings. URLs: https://www.google.com/ https://addons.mozilla.org/en-US/firefox/ User Styles for Stylish: http://userstyles.org/styles/43463/darker-google http://userstyles.org/styles/25811/amo-dark-theme
Comment 3•12 years ago
|
||
I can also reproduce when I added the style mentioned above to userContent.css. Works(with UA spoofing Firefox instead of Minfield) Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1b1pre) Gecko/20080901033305 Minefield/3.1b1pre Broken Google and AMO bith: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1b1pre) Gecko/20080902033133 Minefield/3.1b1pre Pushlog http://hg.mozilla.org/mozilla-central/pushloghtml?startdate=2008-09-01+00%3A00%3A00&enddate=2008-09-02+04%3A00%3A00 Suspected: Bug 451420, Bug 135007, Bug 450912
Comment 5•12 years ago
|
||
As I understand this can be reproduced only when Stylish extension has been installed? Firefox it self is not showing this behavior?
Updated•11 years ago
|
Whiteboard: [psm-padlock]
Comment 6•2 years ago
|
||
Hey Alice,
Can you still reproduce this issue or should we close it?
I added the extension and added styles to both google and amo but the connection is shown as secure for me every time (which I'm guessing is the correct behavior).
Flags: needinfo?(alice0775)
Comment 7•2 years ago
•
|
||
I cannot reproduce the issue even in the bad build.
The user style may have changed.
Status: NEW → RESOLVED
Closed: 2 years ago
Flags: needinfo?(alice0775)
Resolution: --- → INCOMPLETE
You need to log in
before you can comment on or make changes to this bug.
Description
•