[tbb-commits] [Git][tpo/applications/tor-browser][tor-browser-128.1.0esr-14.0-1] fixup! Bug 23247: Communicating security expectations for .onion

[Pier Angelo Vendrame (@pierov)]

Pier Angelo Vendrame pushed to branch tor-browser-128.1.0esr-14.0-1 at The Tor Project / Applications / Tor Browser


Commits:
880f3361 by Pier Angelo Vendrame at 2024-08-21T12:45:09+02:00
fixup! Bug 23247: Communicating security expectations for .onion

Bug 43013: Mixed content upgrades also .onion domains.

- - - - -


1 changed file:

- netwerk/base/nsNetUtil.cpp


Changes:

=====================================
netwerk/base/nsNetUtil.cpp
=====================================
@@ -3054,7 +3054,8 @@ nsresult NS_ShouldSecureUpgrade(
   }
   // If it is a mixed content trustworthy loopback, then we shouldn't upgrade
   // it.
-  if (nsMixedContentBlocker::IsPotentiallyTrustworthyLoopbackURL(aURI)) {
+  if (nsMixedContentBlocker::IsPotentiallyTrustworthyLoopbackURL(aURI) ||
+      nsMixedContentBlocker::IsPotentiallyTrustworthyOnion(aURI)) {
     aShouldUpgrade = false;
     return NS_OK;
   }



View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/880f336143a4a83822e14cd04c896c9156568f72

-- 
View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/880f336143a4a83822e14cd04c896c9156568f72
You're receiving this email because of your account on gitlab.torproject.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.torproject.org/pipermail/tbb-commits/attachments/20240821/a1f409c9/attachment.htm>