wuggy/Dactyloidae
wuggy/Dactyloidae
1
0
Fork 0
mirror of https://repo.dactyloidae.xyz/Dactyloidae/UXP.git synced 2026-09-19 23:07:33 +09:00
Code Issues Projects Releases Packages Wiki Activity

Issue #2914 - Explicitly allow mixed content websockets on localhost.

Browse source 
This carves out an exception for hard-coded loopback addresses to allow
`ws:` connections from `https:` to allow mixed-mode from secure pages.

Resolves #2914
This commit is contained in:
Moonchild 2026-01-23 23:09:58 +01:00 • committed by OwnedByWuigi
commit aee2800d48
3 changed files with 19 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

1
dom/security/nsMixedContentBlocker.h
View file

@ -44,6 +44,7 @@ public:
// See:
// https://w3c.github.io/webappsec-secure-contexts/#is-origin-trustworthy
static bool IsPotentiallyTrustworthyLoopbackHost(const nsACString& aAsciiHost);
static bool IsPotentiallyTrustworthyLoopbackURL(nsIURI* aURL);
static bool IsPotentiallyTrustworthyOrigin(nsIURI* aURI);