898391 - Bubble Adventures game keeps on reloading

Status: RESOLVED WORKSFORME

(Firefox :: Security, defect)

Description

[Manuela Muntean [Away]]

Firefox 23 beta 9 - build ID: 20130725195523

Steps to reproduce

1. Open about:config and set "security.mixed_content.block_display_content" to true
2. In another tab, launch this Facebook game -Bubble Adventures: https://apps.facebook.com/bubbleadv/?from=canvasbookmark_recommended&dlog=4b661c433213374dcd5db2f79c0c7e77&re_code=ep01&re_cnt=64


Expected results: the game should load and start properly 

Actual results: the tab containing the game keeps on reloading on and on (also the progress of the game loading doesn't overcome 0% )

Comment 1

[Manuela Muntean [Away]]

Reproducible with latest Nightly - build ID: 20130725171558

Reproducible with latest Aurora - build ID: 20130726004002

Reproducible with Firefox 22

Comment 2

[Tanvi Vyas[:tanvi]]

What happens with Firefox 22?  It is reproducable after you turn the pref on (the pref wasn't set to true by default until Firefox 23).

Also, can you test the game on Chrome and IE?  What happens on those browsers?  Do you get there mixed content warnings (a yellow bar at the bottom of the page on IE, a grey sheild on the right side of the location bar in Chrome)?  Does the page keep relooping?

If you open the security pane in the webconsole on Firefox 23+ it will tell you what is blocked.  Can you copy paste the security pane output here?

Thanks for finding and reporting this!

Comment 3

[Tanvi Vyas[:tanvi]]

(In reply to Manuela Muntean [:Manuela] [QA] from comment #0)
> 1. Open about:config and set "security.mixed_content.block_display_content"
> to true

This is the wrong setting to test.  In Firefox 23+ we block Mixed Active Content by default (security.mixed_content.block_active_content is set to true by default).  We do not intend to block Mixed Display content anytime in the near future (security.mixed_content.block_display_content should remain false).  Blocking Mixed Display Content will surely break a lot of the web.

Clicking around on this app, I don't see any Mixed Active Content issues (the shield doorhanger doesn't appear and there are no messages about blocked content in the webconsole security pane).

For more information on the Mixed Content Blocker, please see here: https://blog.mozilla.org/tanvi/2013/04/10/mixed-content-blocking-enabled-in-firefox-23/

Closing this bug as invalid, since we aren't blocking mixed display content.

Comment 4

[Ioana (away)]

The fact that mixed display content is not blocked by default, doesn't mean this isn't a bug. As long as users have access to block it, we should keep tracking this.

There is also a chance that in the future you will block this by default, in which case, we should keep track of existing issues to make sure they have been addressed before that happens.

The default non-blocking does make this a low priority though, ergo changing that...

Comment 5

[Tanvi Vyas[:tanvi]]

We can keep this bug open if you prefer.  But we aren't going to block mixed display anytime in the near future.  There is mixed display all over the web and we would break way to much of it in the webs current state.  Hopefully in time (years) that will change and we can start blocking mixed display.

I'm removing this from blocking the compatibility issues bug, since that is specifically to track websites that break with the default behavior introduced in Firefox 23.

Comment 6

[Dana Lucaci, Desktop QA]

This issue is not reproducible anymore using the latest Firefox 124.0 build on Ubuntu 22. I'm closing it as WFM.