Grupos de Google ya no admite nuevas publicaciones ni suscripciones de Usenet. El contenido anterior sigue siendo visible.
Las combinaciones de teclas de Grupos se han actualizado
Cerrar
Ver combinaciones

Intent to prototype: Mixed Content Auto Upgrading of display content (image, audio, video)

Visto 402 veces
Saltar al primer mensaje no leído

Christoph Kerschbaumer

no leída,
27 oct 2020, 12:00:2527/10/20
a dev-pl...@lists.mozilla.org
Summary: This security enhancing feature will automatically upgrade mixed display content from HTTP to HTTPS if the top-level document is HTTPS. Previously this would result in the mixed content indicator. Loads of type image, audio, and video will be upgraded by rewriting the URL from http: to https: without any fallback if the resource is not available over HTTPS.

Bug: https://bugzilla.mozilla.org/show_bug.cgi?id=1633743 <https://bugzilla.mozilla.org/show_bug.cgi?id=1633743>
Standard: https://w3c.github.io/webappsec-mixed-content/level2.html <https://w3c.github.io/webappsec-mixed-content/level2.html>
Platform coverage: All

Preference: security.mixed_content.upgrade_display_content

Devtools bug: No extra work is required for devtools.

Other browsers: Chrome has been shipping that behaviour since Chrome 81; no public signal from Apple.

web-platform-tests: There are none but we will add some within https://bugzilla.mozilla.org/show_bug.cgi?id=1673594 <https://bugzilla.mozilla.org/show_bug.cgi?id=1673594>


Cheers,
Christoph
0 mensajes nuevos