Closed Bug 490506 Opened 15 years ago Closed 15 years ago

mixed content not detected despite http image in window

Categories

(Core :: Security: PSM, defect)

1.9.0 Branch
x86
Windows XP
defect
Not set
normal

Tracking

()

RESOLVED DUPLICATE of bug 135007

People

(Reporter: nelson, Assigned: KaiE)

References

()

Details

Using FF 3.0.10 on Windows https://www.meebo.com/ is an EV site that has mixed content, including two images loaded from http: URLs, but does not show any of the usual mixed content warnings. The lock icon looks normal, and the address bar shows the words "Meebo, Inc. (US)" on a green-ish background. In other words, it's the full EV UI, despite the presence of http content on screen. If you're wondering, right in the middle of the page is an image of a white letter "F" against a cyan background. That's loaded from http://static.ak.fbcdn.net/images/fbconnect/login-buttons/connect_white_small_short.gif The page also contains a background image loaded from http://share.meebo.com/imthis/img/button-blue.png
Pretty sure this is a dup of bug 135007. This is fixed on trunk as well as 1.9.1 (aka Firefox 3.5) but the fix was not backported to 3.0.x. It's a painfully old bug, it was nice to see it fixed.
Status: NEW → RESOLVED
Closed: 15 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.