Create sumo/mdn pages for "Technical Information" and "How does content that isn't secure effect my safety links" in the Mixed Active Content doorhanger +++ This bug was initially created as a clone of Bug #782654 +++

Per the design, http://people.mozilla.com/~lco/ProjectSPF/Mixed_Content/Mixed_Content_Spec/, we need a sumo page that provides more information to a user who clicks on "How does content that isn't secure effect my safety?" Michael, can you or someone from your team help with this? This is a feature that we hope to land in FF 20. Thanks!

I've created a placeholder article here http://support.mozilla.org/kb/how-does-content-isnt-secure-affect-my-safety Since this will be accessed from a link in the product we

Since this will be accessed from a link in the product we shouldn't use the link above in the code. We'll have to create a special link for that. I've CC'd Ricky from SUMO dev to help with that.

Will this be added to Firefox for Android and Firefox on Firefox OS?

I created the redirect for the inproduct link. It is: http://support.mozilla.org/1/%PRODUCT%/%VERSION%/%OS%/%LOCALE%/mixed-content This should match all the format of all existing inproduct links to SUMO. So, for example: http://support.mozilla.org/1/firefox/20.0a2/Darwin/en-US/mixed-content redirects to: https://support.mozilla.org/en-US/kb/how-does-content-isnt-secure-affect-my-safety

Ricky and Michael, instead of going to: https://support.mozilla.org/en-US/kb/how-does-content-isnt-secure-affect-my-safety should we redirect to: https://support.mozilla.org/en-US/kb/how-does-content-that-isnt-secure-affect-my-safety or https://support.mozilla.org/en-US/kb/SecurityIssuesWithMixedContent or https://support.mozilla.org/en-US/kb/MixedContentVulnerabilities In the meantime, I've added the link to http://support.mozilla.org/1/%PRODUCT%/%VERSION%/%OS%/%LOCALE%/mixed-content in my code for Bug 822371. Thanks for the help on this!

Also, can the link I hardcode in the code be https? https://support.mozilla.org/1/%PRODUCT%/%VERSION%/%OS%/%LOCALE%/mixed-content

(In reply to Tanvi Vyas [:tanvi] from comment #7) > Also, can the link I hardcode in the code be https? > > https://support.mozilla.org/1/%PRODUCT%/%VERSION%/%OS%/%LOCALE%/mixed-content Sure, https > http :). We can change the target of the redirect at any time, I'll let Michael Verdi decide where it should go. Thanks!

Not trying to troll, but we just need to make sure that the https link to the support page doesn't have mixed content itself. hehe :)

Hi Michael and Ricky, I have http://support.mozilla.org/1/%PRODUCT%/%VERSION%/%OS%/%LOCALE%/mixed-content in my code in bug 822371. When I click this link, I am taken to page that says "Bad Request". The url is: http://support.mozilla.org/1/%PRODUCT%/20.0a1/Linux/en-US/mixed-content Has the redirect for http://support.mozilla.org/1/%PRODUCT%/%VERSION%/%OS%/%LOCALE%/mixed-content been set up yet? If not, what should we do to set it up? Thanks!

(In reply to Tanvi Vyas [:tanvi] from comment #10) > http://support.mozilla.org/1/%PRODUCT%/20.0a1/Linux/en-US/mixed-content Not sure why %PRODUCT% isn't being filled in? It should be something like 'firefox' or 'mobile' or 'firefox-os'.

(In reply to Ricky Rosario [:rrosario, :r1cky] from comment #11) > (In reply to Tanvi Vyas [:tanvi] from comment #10) > > http://support.mozilla.org/1/%PRODUCT%/20.0a1/Linux/en-US/mixed-content > > > Not sure why %PRODUCT% isn't being filled in? It should be something like > 'firefox' or 'mobile' or 'firefox-os'. I get an message in the Error Console that says: "Error: formatURL: Coudn't find value for key: PRODUCT Source file: ... https://mxr.mozilla.org/mozilla-central/source/toolkit/components/urlformatter/nsURLFormatter.js#112 PRODUCT doesn't seem to be defined here.

(In reply to Tanvi Vyas [:tanvi] from comment #12) > I get an message in the Error Console that says: > "Error: formatURL: Coudn't find value for key: PRODUCT > Source file: ... > https://mxr.mozilla.org/mozilla-central/source/toolkit/components/ > urlformatter/nsURLFormatter.js#112 > > PRODUCT doesn't seem to be defined here. That is way out of my area. But I am sure there are other files to find examples or people that can help.

You want %APP%, not %PRODUCT%. See http://mxr.mozilla.org/mozilla-central/source/toolkit/components/urlformatter/nsURLFormatter.js#85 .

The feature is turned on by default in Firefox 23. Since we renamed the link to just "Learn More" do we want to rename https://support.mozilla.org/en-US/kb/how-does-content-isnt-secure-affect-my-safety or should we leave it as is. Can I start updating this page, or do you need special permissions to edit SUMO pages?

(In reply to Tanvi Vyas [:tanvi] from comment #15) > Can I start updating this page, or do you need special permissions to edit > SUMO pages? Sure thing! No special permissions are required for editing. Thanks!

(In reply to Tanvi Vyas [:tanvi] from comment #15) > The feature is turned on by default in Firefox 23. > > Since we renamed the link to just "Learn More" do we want to rename > https://support.mozilla.org/en-US/kb/how-does-content-isnt-secure-affect-my- > safety or should we leave it as is. > > Can I start updating this page, or do you need special permissions to edit > SUMO pages? You may be interested to note that many Sumo Kb pages have related discussion sections. I started a thread on this subject. https://support.mozilla.org/en-US/kb/how-does-content-isnt-secure-affect-my-safety/discuss/4804 Such threads get picked up by a sumo dashboard https://support.mozilla.org/en-US/kb/all/discussions

The "learn more" page has been updated: https://support.mozilla.org/en-US/kb/how-does-content-isnt-secure-affect-my-safety Thanks to Michael Verdi for his help on this! There are a few more tweaks in progress, so leaving this bug open for now.

(In reply to Tanvi Vyas [:tanvi] from comment #18) > The "learn more" page has been updated: > https://support.mozilla.org/en-US/kb/how-does-content-isnt-secure-affect-my- > safety > > Thanks to Michael Verdi for his help on this! There are a few more tweaks > in progress, so leaving this bug open for now. This bug is still open!

ack'ing the needinfo. The UI has changed a bit and these pages need updating anyway. Keeping the needinfo to remind myself of this and see if there was anything else we missed.

Thanks to marko for updating https://support.mozilla.org/en-US/kb/how-does-content-isnt-secure-affect-my-safety?as=u&utm_source=inproduct with new screenshots. Since Tracking Protection landed, the shield looks a little different. The updates are in review. Looks like the Android page needs updates too since tracking protection changed the UI in androdi as well - https://support.mozilla.org/en-US/kb/how-does-insecure-content-affect-safety-android. Can someone from SUMO help get screenshots for this?

(In reply to Tanvi Vyas [:tanvi] from comment #21) > Thanks to marko for updating > https://support.mozilla.org/en-US/kb/how-does-content-isnt-secure-affect-my- > safety?as=u&utm_source=inproduct with new screenshots. Since Tracking > Protection landed, the shield looks a little different. The updates are in > review. > > Looks like the Android page needs updates too since tracking protection > changed the UI in androdi as well - > https://support.mozilla.org/en-US/kb/how-does-insecure-content-affect-safety- > android. Can someone from SUMO help get screenshots for this? I posted a copy of your comments to the article discussion forums, https://support.mozilla.org/en-US/kb/how-does-content-isnt-secure-affect-my-safety/discuss/5964 https://support.mozilla.org/en-US/kb/how-does-insecure-content-affect-safety-android/discuss/5965

(In reply to Tanvi Vyas [:tanvi] from comment #21) > Thanks to marko for updating > https://support.mozilla.org/en-US/kb/how-does-content-isnt-secure-affect-my- > safety?as=u&utm_source=inproduct with new screenshots. Since Tracking > Protection landed, the shield looks a little different. The updates are in > review. > > Looks like the Android page needs updates too since tracking protection > changed the UI in androdi as well - > https://support.mozilla.org/en-US/kb/how-does-insecure-content-affect-safety- > android. Can someone from SUMO help get screenshots for this? Both these pages look good. Closing this bug.