Closed
Bug 877443
Opened 11 years ago
Closed 7 years ago
https://inbox.com/ does not work properly because of mixed content blocking
Categories
(Web Compatibility :: Site Reports, defect)
Web Compatibility
Site Reports
Tracking
(Not tracked)
RESOLVED
WORKSFORME
People
(Reporter: mwobensmith, Unassigned)
References
()
Details
(Whiteboard: [mcb-chrome30+][needscontact])
Mixed content blocking is a feature that prevents insecure elements on secure pages from loading. In Firefox 23, this feature will default to blocking "active" insecure content, which may break some web sites. More information on Firefox's Mixed Content Blocker is below: http://blog.mozilla.org/tanvi/2013/04/10/mixed-content-blocking-enabled-in-firefox-23/ The security feature is currently breaking the HTTPS version of inbox.com. It also appears to be functioning incorrectly in Chrome 26 and IE10. https://inbox.com/ should render and function like http://inbox.com/, but it doesn't because some HTTP resource(s) are not loaded. Here is a list of the active, HTTP resources that were blocked: [15:47:26.133] Blocked loading mixed active content "http://as.inbox.com/ar.aspx?ie=0&portal=0&isp=0&paids=0&tbl=0&rss=0&radio=0&weather=0&mail=0&ssaver=0&Aqua=0&Fireplace=0&Earth=0&Slide=0&funball=0&spyterm=0&radiosap=0&smileys=0&width=448&height=185&website=3&ipref=i109&cmsstyle=adr_style_inbox" @ https://www.inbox.com/:1
Reporter | ||
Comment 1•11 years ago
|
||
Correction: site is functioning incorrectly in Firefox 23, but is unaffected in Chrome and IE, as far as we can tell.
Comment 2•11 years ago
|
||
inbox.com is one of the sites that only Firefox blocks; Chrome 26 and IE 10 do not block. Chrome Canary does block Mixed Active Content on the page. The content in question is an HTTP iframe: <iframe scrolling='no' border='0' frameborder='0' hspace='0' vspace='0' marginheight='0' marginwidth='0' width='448' height='230' src='http://as.inbox.com/ar.aspx?ie=0&tbl=0&rss=0&wsg=0&radio=0&weather=0&funball=0&mail=0&ssaver=0&Aqua=0&Fireplace=0&Earth=0&Slide=0&funball=0&secguard=0&spyterm=0&portal=0&isp=0&radiosap=0&smileys=0&width=448&height=185&website=3&ipref=i109&cmsstyle=adr_style_inbox'></iframe> Not sure why IE doesn't block this iframe.
Updated•11 years ago
|
Whiteboard: [mcb-chrome29+]
Comment 3•11 years ago
|
||
The content that is blocked is an inbox.com ad to sign up for inbox.com features (email, storage, etc). So not quiet [mcb-ads-only], but close.
Updated•11 years ago
|
Whiteboard: [mcb-chrome29+] → [mcb-chrome30+]
Updated•10 years ago
|
Component: English US → Desktop
Updated•8 years ago
|
Whiteboard: [mcb-chrome30+] → [mcb-chrome30+][needscontact]
Updated•5 years ago
|
Product: Tech Evangelism → Web Compatibility
You need to log in
before you can comment on or make changes to this bug.
Description
•