76168 - No warning when viewing an SSL page with insecure content

Status: VERIFIED DUPLICATE of bug 82437

(Core :: DOM: Navigation, defect, P3)

Description

[John Unruh]

1.) Under Privacy/Security > SSL prefs, check "Viewing a page with 
an encryped/unencrypted mix.
2.) Visit the above in-house site.
What is expected: A warning that you are visiting a page with an 
encryped/unencrypted mix. Also, the lock icon should be shown as mixed.
What happens: No warning, other than the warning that I am entering a secure 
site.

Comment 1

[John Unruh]

Milestone 2.0

Comment 2

[John G. Myers]

nsSecureBrowserUI is not getting OnStateChange notifications for inline images.  
This is a bug in the docloader (or whatever should be sending 
nsIWebProgressListener notifications).

Comment 3

[John G. Myers]

Change to Browser/Embedding: Docshell

Comment 4

[John Unruh]

cc'ing people, QA > junruh

Comment 5

[Bob Lord]

Should this bug be filed against PSM instead?

Comment 6

[John G. Myers]

No, the bug is that the docloader is not sending the correct notifications to 
PSM.

Comment 7

[Adam Lock]

-> Conrad

Comment 8

[Conrad Carlen (not reading bugmail)]

Accepting.

Comment 9

[Conrad Carlen (not reading bugmail)]

John (Unruh) - Do you have a mixed content site in which the mixed content is
not images? The problem may be specific to images and I'd like a test case to
step through.

Comment 10

[John Unruh]

This site is 100% insecure content, even though it show https - 
https://junruh.mcom.com/oneframe.html

Comment 11

[John G. Myers]

There is certainly a problem specific to images.  There is another problem 
specific to frames (the mixed frame test page gives you an entering secure 
dialog, an entering insecure dialog, then an entering secure dialog and leaves 
the icon locked), but I don't know if a bug has been filed against the frame 
problem.

Comment 12

[Conrad Carlen (not reading bugmail)]

Going to the given URL has developed more problems since this bug was filed.
With current builds, I don't even get the warning about going to a secure site -
no warnings at all! After going back to a build in which I got at least the
warning about the secure site, I've found that warning stopped happening between
2001051004 and 2001051208. So, this has been more broken than this bug claims
ever since about 05/11.

Comment 13

[selmer (gone)]

Any hope of a patch in the next couple days?  Please update the status
whiteboard with your eta.

Comment 14

[Conrad Carlen (not reading bugmail)]

-> 0.9.3 I can't yet put an eta on it.

Comment 15

[David P. Drinan]

Marking dup of 82437.

*** This bug has been marked as a duplicate of 82437 ***

Comment 16

[John Unruh]

Verified dupe.