838817 - Mixed_Content not being blocked on some websites

Status: RESOLVED WORKSFORME

(Firefox :: Security, defect)

Description

[Greg]

User Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:18.0) Gecko/20100101 Firefox/18.0
Build ID: 20130201190337

Steps to reproduce:

I updated Firefox from 18.01 to 18.02 and then went to website: https://duck.co/topic/foss-2012-donation-nominations.

When using 18.01, the site shows https with lock-icon (mixed_content is blocked). When using 18.02, the site shows https withOUT lock-icon (mixed_content is NOT blocked).


Actual results:

mixed_content is displayed when using Firefox 18.02 despite the fact that I have both about:config settings security.mixed_content.block_active_content AND security.mixed_content.block_display_content set to TRUE.


Expected results:

mixed_content should be blocked when the about:config settings are set to true. 

Updating to 18.02 broke this functionality.

Comment 1

[Matthias Versen [:Matti]]

The update contains only a fix for one Javascript crash.

Comment 2

[Greg]

I went and tested it again on different computers. Using 18.01, mixed_content is blocked on every single webpage I test. Using 18.02, mixed_content is never blocked. 

Whatever change was made to 18.02 appears to have broke mixed_content blocking.

Comment 3

[Greg]

Mixed Content is not blocked on this website: https://duck.co/topic/foss-2012-donation-nominations

Comment 4

[Brian Smith (:briansmith, :bsmith, use NEEDINFO?)]

Greg, please re-test this and leave a comment if this is still a problem. I think that duck.co fixed their site to not have mixed content.