[tor-bugs] #9196 [EFF-HTTPS Everywhere]: Postpone Firefox mixed content blocking from FF 23 -> 24 (with user notice & control)
Tor Bug Tracker & Wiki
blackhole at torproject.org
Wed Jul 3 00:08:50 UTC 2013
#9196: Postpone Firefox mixed content blocking from FF 23 -> 24 (with user notice
& control)
----------------------------------+-----------------------------------------
Reporter: pde | Owner: lisacyao
Type: defect | Status: new
Priority: blocker | Milestone: HTTPS-E 3.3
Component: EFF-HTTPS Everywhere | Version:
Keywords: | Parent:
Points: | Actualpoints:
----------------------------------+-----------------------------------------
Neither Firefox's Mixed Content Blocker nor HTTPS Everywhere will be ready
for the other when Firefox 23 ships. On the Mozilla side, we need a fix
for [https://bugzilla.mozilla.org/show_bug.cgi?id=878890 MCB firing too
early in the request pipeline], and on the HTTPS Everywhere side we need
to correctly [label https://trac.torproject.org/projects/tor/ticket/8774]
and [disable https://trac.torproject.org/projects/tor/ticket/8776] those
rulesets.
For power users this isn't a problem, because they can live with broken
CSS or manually allow mixed content. But for most of our users this is
catastrophic.
So we will ship a patch which temporarily disables the MCB about:config
setting if your Mozilla version is 23, but which pops a NotificationBox
offering more information and letting you turn it back on if you'd like
to.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/9196>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list