Security/Features/Mixed Content Blocker: Difference between revisions

Detailed blog posts:

https://blog.mozilla.org/tanvi/2013/04/10/mixed-content-blocking-enabled-in-firefox-23/

https://blog.mozilla.org/security/2013/05/16/mixed-content-blocking-in-firefox-aurora/

|Feature non-goals=To prevent the disclosure of cookies and other sensitive data through mixed display content, such as images, and video.  We have a pref, disabled by default, which when enabled would block these loads as well using the same infrastructure.

|Feature functional spec=Blocking of the mixed content loads occurs at the nsIContentPolicy level.  When such a block occurs, the content policy fires an event at the document containing the mixed content, which causes the browser to display UI notifying the user that content was blocked, and providing the option to reload the page with the mixed content enabled.