Closed Bug 1056481 Opened 10 years ago Closed 10 years ago

Update reference to CDN to HTTPS

Categories

(Firefox OS Graveyard :: Gaia::Homescreen, defect)

x86
macOS
defect
Not set
normal

Tracking

(Not tracked)

RESOLVED FIXED

People

(Reporter: timdream, Unassigned)

Details

Attachments

(1 file)

With bug 1054281 we should use HTTPS whenever getting stuff from CDN. For the specific use case of home screen, while there are no security risk for loading a image from HTTP, transmitting the URL itself in clear might be a privacy issue.
Hi Tim, I did a lookup about the fxos.cdn.mozilla.net address to find all the occurences of the cdn in gaia and I only found one. I updated it to https. Please have a look at PR and let me know if there's more file to modify. Thanks !
Attachment #8492730 - Flags: feedback?(timdream)
Comment on attachment 8492730 [details] Github PR for Bug 1056481 with url using https for cdn. That's correct. There is only one reference to CDN.
Attachment #8492730 - Flags: review+
Attachment #8492730 - Flags: feedback?(timdream)
Attachment #8492730 - Flags: feedback+
Status: NEW → RESOLVED
Closed: 10 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: