885922 - https://get.adobe.com/flashplayer/ does not work properly because of mixed content blocking

Status: RESOLVED FIXED

(Tech Evangelism Graveyard :: English US, defect)

Description

[Matt Wobensmith [:mwobensmith][:matt:]]

Mixed content blocking is a feature that prevents insecure elements on secure pages from loading. In Firefox 23, this feature will default to blocking "active" insecure content, which may break some web sites. 

More information on Firefox's Mixed Content Blocker is below: 
http://blog.mozilla.org/tanvi/2013/04/10/mixed-content-blocking-enabled-in-firefox-23/

The security feature is currently breaking the HTTPS version of inbox.com. It also appears to be functioning incorrectly in Chrome 26.

IE!0 is not affected because the site redirects specifically for that browser.

https://get.adobe.com/flashplayer/ should render and function like http://get.adobe.com/flashplayer/, but it doesn't because some HTTP resource(s) are not loaded.  Here is a list of the active, HTTP resources that were blocked: 

Blocked loading mixed active content "http://wwwimages.adobe.com/www.adobe.com/ubi/template/identity/adobe/Pane/screen.css" @ https://get.adobe.com/flashplayer/
Blocked loading mixed active content "http://wwwimages.adobe.com/www.adobe.com/js/foresee/foresee-trigger-dlc.js" @ https://get.adobe.com/flashplayer/
Blocked loading mixed active content "http://wwwimages.adobe.com/www.adobe.com/downloadcenter/js/live/jquery-1.7.1.min.js" @ https://get.adobe.com/flashplayer/
Blocked loading mixed active content "http://wwwimages.adobe.com/www.adobe.com/uber/js/pdc_s_code.js" @ https://get.adobe.com/flashplayer/
Blocked loading mixed active content "http://wwwimages.adobe.com/www.adobe.com/uber/js/atm/s_code_acdc.js" @ https://get.adobe.com/flashplayer/
Blocked loading mixed active content "http://wwwimages.adobe.com/www.adobe.com/downloadcenter/js/jquery.nyroModal/styles/nyroModal.css" @ https://get.adobe.com/flashplayer/
Blocked loading mixed active content "http://wwwimages.adobe.com/www.adobe.com/downloadcenter/js/live/polarbear.js" @ https://get.adobe.com/flashplayer/
Blocked loading mixed active content "http://wwwimages.adobe.com/www.adobe.com/downloadcenter/js/jquery.nyroModal/js/jquery.nyroModal.custom.min.js" @ https://get.adobe.com/flashplayer/

Comment 1

[Matt Wobensmith [:mwobensmith][:matt:]]

Jeromie, can you see to it that the web team @ Adobe looks into this bug? It will be the default in FF23, which is six weeks away. Feel free to add pertinent email addresses in the CC field of this bug. Thanks!

Comment 2

[Jeromie Clark]

Thanks Matt.  I'll escalate it to the web team.

Comment 3

[Tanvi Vyas[:tanvi]]

Any update on this?  We are starting to get user complaints:
https://input.mozilla.org/en-US/dashboard/response/3846639

Comment 4

[Jeromie Clark]

We're exploring our options internally and should have an update in a few days.

Comment 5

[Tanvi Vyas[:tanvi]]

(In reply to Jeromie Clark from comment #4)
> We're exploring our options internally and should have an update in a few
> days.

Great!  Thanks Jeromie :)

Comment 6

[Yuko Chapman]

Hi Matt,

We @ Adobe resolved this issue and applied fix to production yesterday.
Please mark this as fixed?

Comment 7

[Matt Wobensmith [:mwobensmith][:matt:]]

Hi Yuko! :)

Looks great, we're all set.

All the best!

Comment 8

[Tanvi Vyas[:tanvi]]

Thanks so much for fixing this!