← Back to team overview

desktop-packages team mailing list archive

[Bug 1019877]

 

loop.CSP;default-src 'self' about: file: chrome:; img-src 'self' data:
http://www.gravatar.com/ about: file: chrome:; font-src 'none'; connect-
src wss://*.tokbox.com https://*.opentok.com https://*.tokbox.com
wss://*.mozilla.com https://*.mozilla.org wss://*.mozaws.net

gravatar over http instead of https. The site can be reached over https.

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to firefox in Ubuntu.
https://bugs.launchpad.net/bugs/1019877

Title:
  Use HTTPS instead of HTTP

Status in The Mozilla Firefox Browser:
  Confirmed
Status in “firefox” package in Ubuntu:
  Confirmed

Bug description:
  about:config
  Search: http://

  browser.safebrowsing.reportErrorURL;http://%LOCALE%.phish-error.mozilla.com/?hl=%LOCALE%
  browser.safebrowsing.reportGenericURL;http://%LOCALE%.phish-generic.mozilla.com/?hl=%LOCALE%
  browser.safebrowsing.reportMalwareErrorURL;http://%LOCALE%.malware-error.mozilla.com/?hl=%LOCALE%
  browser.safebrowsing.reportMalwareURL;http://%LOCALE%.malware-report.mozilla.com/?hl=%LOCALE%
  browser.safebrowsing.reportPhishURL;http://%LOCALE%.phish-report.mozilla.com/?hl=%LOCALE%

  devtools.gcli.jquerySrc;http://ajax.googleapis.com/ajax/libs/jquery/2.1.1/jquery.min.js
  devtools.gcli.lodashSrc;http://cdnjs.cloudflare.com/ajax/libs/lodash.js/2.4.1/lodash.min.js
  devtools.gcli.underscoreSrc;http://cdnjs.cloudflare.com/ajax/libs/underscore.js/1.6.0/underscore-min.js

  On 'app.update.url.manual;http://www.firefox.com' suffix a slash at
  the end to make it FQDN.

To manage notifications about this bug go to:
https://bugs.launchpad.net/firefox/+bug/1019877/+subscriptions