Commit Graph

3 Commits

Author SHA1 Message Date
NTD b3a189d2de Follow up to 7bd7e8a - *aState needs both STATE_IS_SECURE and STATE_SECURE_HIGH on re-eval of mixed content 2018-07-25 06:52:56 +08:00
Pale Moon 3ca7947b8a Reset mixed-mode page status to secure if no actual load has occurred through the mixed content blocker.
This should take care of injection of non-network URIs that aren't same origin (e.g. extension-sourced data: URIs) triggering mixed-mode warnings.
Assumption here is that data: URIs are safe if "local"; this is a security trade-off that should be acceptable.
2018-07-25 06:52:49 +08:00
Moonchild baf46a6bf1 Merge pull request #1 from mozilla/esr38: Esr38 upstream pull 2018-07-24 23:04:07 +08:00