[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-bugs] #21323 [Applications/Tor Browser]: Activate mixed content blocking
#21323: Activate mixed content blocking
--------------------------------------+-----------------------------------
Reporter: arthuredelstein | Owner: tbb-team
Type: defect | Status: needs_information
Priority: Medium | Milestone:
Component: Applications/Tor Browser | Version:
Severity: Normal | Resolution:
Keywords: TorBrowserTeam201701R | Actual Points:
Parent ID: | Points:
Reviewer: | Sponsor:
--------------------------------------+-----------------------------------
Comment (by legind):
We test rulesets with the default settings in browsers which blocks active
mixed content, but note the comment here: https://www.eff.org/https-
everywhere/rulesets#mixed-content-blocking-mcb
> Some rulesets may trigger active mixed content (i.e. scripts loaded over
HTTP instead of HTTPS). This type of mixed content is blocked in both
Chrome and Firefox, before HTTPS Everywhere has a chance to rewrite the
URLs to an HTTPS version. This generally breaks the site. However, the Tor
Browser doesn't block mixed content, in order to allow HTTPS Everywhere to
try and rewrite the URLs to an HTTPS version.
>
> To enable a rule only on platforms that allow mixed content (currently
only the Tor Browser), you can add a `platform="mixedcontent"` attribute
to the ruleset element.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/21323#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs