Bug 1445951 - Treat object subrequests as mixed content. r?ckerschb draft
authorJonathan Kingston <jkt@mozilla.com>
Thu, 15 Mar 2018 14:20:40 +0000
changeset 767963 cf71436d9098bc3c8b48a8db1b77179903d2f226
parent 767962 f7b09f1d909306413b36f0d6184a9eefe3c29542
push id102761
push userbmo:jkt@mozilla.com
push dateThu, 15 Mar 2018 14:21:07 +0000
reviewersckerschb
bugs1445951
milestone61.0a1
Bug 1445951 - Treat object subrequests as mixed content. r?ckerschb MozReview-Commit-ID: F7HgoAaVW7C
modules/libpref/init/all.js
--- a/modules/libpref/init/all.js
+++ b/modules/libpref/init/all.js
@@ -2649,21 +2649,17 @@ pref("security.signed_content.CSP.defaul
 // Mixed content blocking
 pref("security.mixed_content.block_active_content", false);
 pref("security.mixed_content.block_display_content", false);
 
 // Upgrade mixed display content before it's blocked
 pref("security.mixed_content.upgrade_display_content", false);
 
 // Block sub requests that happen within an object
-#ifdef EARLY_BETA_OR_EARLIER
-pref("security.mixed_content.block_object_subrequest", true);
-#else
 pref("security.mixed_content.block_object_subrequest", false);
-#endif
 
 // Sub-resource integrity
 pref("security.sri.enable", true);
 
 // Block scripts with wrong MIME type such as image/ or video/.
 pref("security.block_script_with_wrong_mime", true);
 
 // OCSP must-staple