Mixed SSL content not blocked by Firefox

This is a long standing problem for Firefox and makes me stay away from it for any online commerce/banking transactions. Internet Explorer is the safest in this case as it gives the user an option to block the insecure content before loading it, but Firefox just shows a useless mixed content warning but still loads the insecure page. I have seen bugzilla items pointing to this and Mozilla's stringent 'NO' to fixing this glaring security hole. I want to know when this issue will be resolved and what is Mozilla doing in the interim to thwart problems with such sites?

hello, starting with firefox 18 this feature will begin landing in the browser.
https://blog.mozilla.org/futurereleases/2012/11/26/firefox-beta-adds-ionmonkey-to-improve-javascript-performance/
in about:config you can toggle security.mixed_content.block_active_content & security.mixed_content.block_display_content to true, at a later stage there will also be a visual UI created fro mixed content (see [https://bugzilla.mozilla.org/show_bug.cgi?id=782654 bug #782654] & [http://people.mozilla.com/~lco/ProjectSPF/Mixed_Content/Mixed_Content_Spec/Mixed%20Content%20Spec%20v4.pdf the design specs pdf])

Similar Messages

TOC, Index, Search content not loading in FireFox 3.0 +

Hi,
I have created from RH 8 a merged Webhelp system (1 master, 2 children - based on Peter Grainge's posted procedure). It works fine from IE, and on my system, from FireFox 3.0 and up.
The problem is, that when deployed at the customer's site, the TOC, Index, and Search content does not load in FireFox. All frames display (Nav, contents, and the top frame), but the content for the TOC, Index, and Search does not load.
This only happens at the customer site. The webhelp system works okay in IE.
I have checked and we are running the same javascript version, have the same security settings in FireFox set.
I looked on Peter's site and implemented the redirect fix for FireFox that he has posted, but that hasn't seemed to fix the problem.
They aren't running any special toolbars (like Google toolbar). I am checking on add ons.
Does anyone have any ideas on what else I might check or better yet what might be causing the problem?
Thank you,
Tannis

Willam
A merge will not work properly unless all the projects have been generated once. After that it should not matter that a project is missing, indeed simply not publishing one of the projects to the server is one of the features of merging making it easy to supply different customers with different content.
I wonder if the problem you saw was because that project had not been generated.
Tannis
Sorry, the reference to AIR help was because you mentioned Snippet 141 which is AIR specific. I didn't look further back in the thread.
You said that the start page of a child project opens the tripane window with the default topic but you do not get the TOC etc. That rules out the merge being the problem. I am inclined to the view that the server is the issue so get your client to load the published output from my merge demo as that is a known quantity. Ask them to open each child project in turn and then finally the merge.
See www.grainge.org for RoboHelp and Authoring tips
@petergrainge

Content not Launching in Firefox ESR on Ubuntu

We are currently experiencing issues launching content in OLM using FireFox ESR 31 on Ubuntu 14.04 LTS using JDK 1.7.0_67. This is currently affecting over 15000 users.
Please help with advice

What's your application release? Assuming you are on 12.1.x ..
Was this working before? If yes, any changes been done recently?
What's the error you get?
Is the issue with OLM only? Is accessing the other modules working as expected?
Do you meet the requirements in https://blogs.oracle.com/stevenChan/entry/firefox_esr_31 ?
I don't think you have EBS installed on Ubuntu with 15000 users as you wouldn't get support from Oracle -- This is not a certified OS for any tier node (Application, database or client).
Oracle E-Business Suite Installation and Upgrade Notes Release 12 (12.1.1) for Linux x86-64 (Doc ID 761566.1)
Oracle E-Business Suite Installation and Upgrade Notes Release 12 (12.1.1) for Linux x86 (Doc ID 761564.1)
Thanks,
Hussein

Content not visible in Firefox

Hi! I use your awesome browser as my #1 browser. Since the most recent update, however, I can not see content on Facebook that was available (and works on all other browsers).
Here is a link where you can see it working on all other broswers but not FF:
https://www.facebook.com/pages/The-Gables-Inn/91848818163?id=91848818163&sk=app_243138959111822
It in an iFrame FYI.
I have developed over 3000 FB pages and now they only work in the other browsers. I have gotten most of my clients to instal FF so this is an even bigger issue. I am out of ideas. Please let me know if its me or what to do to make it work.
Thank you so much!!!!
Sean

Yes, I am aware it is mixed content. Awareness isn't the issue. It's that there was no warning of this and it isn't intutitive to solve it.
Many people who have FB Business pages, but who aren't techie savvy won't be able to figure this out.
That's why there should be some type of dialog box that opens up giving them an option to choose.

Why are tracking cookies not blocked by Firefox when accept 3rd party cookies is unchecked?

I have unchecked 'Accept third party cookies' but my Norton keeps finding and then deleting tracking cookies on my system. What is the problem?

Hi TalktoWolf, I don't see anything especially unusual about the blog. Have you noticed any problems with Flash media on other sites?
When you have a problem with one particular site, a good "first thing to try" is clearing your Firefox cache and deleting your saved cookies for the site.
1. Clear Firefox's Cache Completely
orange Firefox button ''or'' Tools menu > Options > Advanced
On the Network mini-tab > Cached Web Content : "Clear Now"
2. Remove your tvo.org cookies in this dialog:
right-click this page and choose View Page Info > Security > "View Cookies"
In the box at the top of the dialog, change mozilla.org to tvo.org and remove those cookies
Then try reloading the page. Does that help?

Firefox has crashed numerous times on me tonight, and I keep getting an unresponsive script error (Script: chrome://devany/content/main.js:254) regardless of what website I'm on. NoScript will not block this script, and it's popping up with an increasing

Firefox has crashed numerous times on me tonight, and I keep getting an unresponsive script error (Script: chrome://devany/content/main.js:254) regardless of what website I'm on. NoScript will not block this script, and it's popping up with an increasing and alarming frequency. It's completely crippled my Firefox, and getting the a large enough window between unresponsive script warnings to get the Troubleshooting Information from Firefox took me a good 20 minutes. It's a very persistent script. I've already re-installed Firefox and restarted my computer, and scanned for viruses/malware. I'm on a Mac, if it makes a difference.
== This happened ==
Every time Firefox opened
== Tonight. I can't say what site I was on, though I first noticed it on DeviantArt and thought it was their new layout producing problems. ==
== User Agent ==
Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_5_8; en-us) AppleWebKit/531.22.7 (KHTML, like Gecko) Version/4.0.5 Safari/531.22.7

yay, I had this same issue, and I too browsed deviantArt and also have got Deviantanywhere add-on installed. : D
I'm so glad that You've found a solution and shared it with us.
I was really getting worried that I'd done something to get malware installed on my 'puter. *Phew* !!
I'm going to disable DeviantAnywhere after I post this and hopefully this will be fixed for me too!
I actually hadn't kept my firefox up to date. but.. *shh...*
I updated it and after I did, it told me that there was a script running that was not responding. : )
yay for FireFox~
~QuinsY.

Why does Firefox hang when accessing SSL content on Oracle 10.3.6 WebLogic with JSSE enabled?

For several weeks we have been working with Oracle support to find out why our Firefox browser hangs for 20-30 seconds when connecting to SSL content on 10.3.6 WebLogic only when JSSE is enabled. It occurs when first attempting to connect to an enterprise WebLogic deployment. When JSSE is disabled the problem does not occur but JSSE must be enabled on WebLogic for our configuration. The problem also does 'not' occur when JSSE is enabled when using IE (8). In 10.3.5 WebLogic, the issue does not occur with Firefox but 10.3.6 is our preferred version and this is a major issue for us.
For the Firefox version, we used version 18 and 17 with no difference. Thanks for your help.

Hi,
I did remove the entry and restarted the managed server, but nodemanager added the option again.
Regarding startup.properties, it doesn't have any ssl configuration:
Server startup properties
#Fri Apr 24 11:54:54 CDT 2015
Arguments=-Xms1024m -Xmx1024m -XX\:UseConcMarkSweepGC -Djava.net.perferIPv4Stack\=false -Dweblogic.ssl.JSSEEnabled\=false
SSLArguments=-Dweblogic.security.SSL.ignoreHostnameVerification\=false -Dweblogic.ReverseDNSAllowed\=false
RestartMax=2
RestartDelaySeconds=0
RestartInterval=3600
AdminURL=http\://wlserver\:7001
AutoRestart=true
AutoKillIfFailed=false

When I try to download the latest version of iTunes on my iPod Classic I get the message that "iTunes has an invalid signature" and that "Content was blocked because it was not signed by a valid security certificate. Anyone know how to fix this?

When I try to download the latest version of iTunes from apple.com, I get the message "Content was blocked because it was not signed by a valid security certificate."When I open iTunes and try to download the latest version there, I get the message "iTunes has an invalid signature. The download has been removed." I have also gotten an Internet Script Error stating that an error has occured in Line 0, Char O and that "Access is denied to images.apple.com/global/scripts/lib/iepngfix.htc." This problem has never occurred with earlier versions of ITunes. Anyone know how to fix this problem?

Are you downloading iTunes form an Apple website or somewhere else? If the answer is somewhere else, try downloading it from Apple. Click on iTunes in the black menu bar above and go from there.
Let us know what happens.

Content was blocked because it was not signed by a valid security certificate. ie 10

Content was blocked because it was not signed by a valid security certificate.

Hi，
Which website shows this message? Could you give us an example? Did you encounter this error on a website which you used to visit without error, sometimes, it is a website-related problem, and can't be corrected in Internet Explorer.
Please also have a look of this link
http://support.microsoft.com/kb/931850/en-us
Yolanda Zhu
TechNet Community Support

Filled colour as a variable? and setting layer to not block the content underneath?

I wonder if it's possible to take the filled colour (filled with myColor.setRGB(0x993366); like a colouring style) and set the colour filled to be a value of a variable in an if statement? if yes, anyone know how to do it?
and is it possible to set a layer's content so that it does not block any button underneath it? I'm trying use that movie as a mask but I do not want it to block any activity underneath it. or is it better to use the myMovieClip .setMask ( maskMovieClip )(I don't really know how to use this) I only need the masking to appear when a specific button is pressed. Hope my english isn't too confusing. Thanks.

Yes. If you check the documentation for the Color class you will see there is a getRGB() method which returns the value set by the setRGB() method. However it doesn't tell you what color something is, it tells you what color transform has been assigned to that object. So if you make a movie of a red square and you do this:
var myColor:Color=new Color(myClip);
trace(myColor.getRGB()); // traces "0"
Which could either mean it has been tranformed to black or that it has no transform (which is the case here.)
What you are seems more complicated than it probably needs to be. What are you actually trying to do? How are these clips having their transforms assigned? What does it mean that they are a certain color.
As for the layer thing. I have no idea what you are talking about.
BTW, here is something you didn't ask for. Using the on(event) type handler coding went out of style with the introduction of Flash 6 in 2002. It is a very inefficient way to code and is very difficult to maintian because you have to look through all your items to find the code. Most folks these days put the code on the timeline where it is all in one place and easier to maintain. Here is a great article about it:
http://www.quip.net/blog/2006/flash/museum-pieces-on-and-onclipevent

Thunderbird does not show a blocked remote content notification bar when content is blocked even when Allow remote content is not clicked

Thunderbird does not show a blocked remote content notification bar when content is blocked to allow remote content. The allow remote content box is not enabled in the privacy settings.

Is it always like that? or just from one source?
How are you viewing emails ?
(view / Message Body As) should be ''original html ''

Javascript not loading content after updating from firefox 26 to 27

on my site i have a page on which javascript pre-loads the content and then shows it.
this thing was working perfectly fine on firefox 26 but soon as i updated to firefox 27
the content doesn't show after loading
Like i have an image for 'loading content' which first appears and then the loaded content
shows up. This image is still showing in version 27 but the content which shows after is not showing at all.
I inspected the page and the divs and content is there but its just not visible somehow.
Please help me with this problem .. im stuck with this if it doesn't show up. Thanks.

this doesn't solve the problem.
actually its working on all other browsers, the content is showing.
but its not working on firefox 27. what problem could it be which is preventing version 27 from loading the content when its working just fine on version 26 (i just checked it on a different system with version 26).
also there was an instance when the same content wasn't loading on version 26 also but it was a problem due to some pinterest script. once i removed it everything became just fine i.e. content started loading (on version 26). Now, if that helps in deducing the problem please help me out.

"Symantec Class 3 EV SSL CA - G2" intermediate Certificate Authority is not trusted by Firefox ?

''locking as duplicate of [https://support.mozilla.org/en-US/questions/1014430 /questions/1014430]''
Hallo
We recently purchased a certificate from Symantec. It's intermediate authority is Symantec Class 3 EV SSL CA - G2, but Mozilla firefox doesn't seem to trust it. Other browsers (IE and Chrome) have the certificate chain trusted. Is there a way to add this certificate chain in Firefox, because many of our clients using Firefox are complaining and asking about our site's security.

hello JKlecherov, firefox shouldn't give any error, when the intermediary certificate is properly linked to the root ca. please refer to symantec's documentation how to install it on your server or you can also use their tool at https://ssltools.websecurity.symantec.com/checker/views/certCheck.jsp

HELP! Images not loading and Firefox taskbar icon is a white file.

I went through all the suggestions in the image not loading help page and same with the add ins and nothing helping. The images load fine on Google Chrome so I know it's not the site. It might just be Adobe Flash images, but that's as far as I know how to pinpoint.
As far as the task bar goes, it's just a while file icon instead of the Firefox one. It doesn't bother me, but I just thought it might be related.
I'd appreciate any help! Anybody! Thanks,
Stef

What do you see if you right-click the area where such a missing image should be?
Is that a context menu for images with "View Image Info"?
Are there any icons on the location bar that plugins are used or mixed content is blocked?
If images are missing then check that you do not block images from some domains.
*Press the F10 key or tap the Alt key to bring up the hidden Menu bar.
Check the permissions for the domain in the currently selected tab in "Tools > Page Info > Permissions"
Check "Tools > Page Info > Media" for blocked images
*Select the first image link and use the cursor Down key to scroll through the list.
*If an image in the list is grayed and "Block Images from..." has a checkmark then remove this checkmark to unblock images from this domain.
Make sure that you do not block (third-party) images, the permissions.default.image pref on the about:config page should be 1.
Make sure that you haven't enabled a High Contrast theme in the Windows/Mac Accessibility settings.
Make sure that you allow pages to choose their own colors.
*Tools > Options > Content : Fonts & Colors > Colors : [X] "Allow pages to choose their own colors, instead of my selections above"
Note that these settings affect background images.
See also:
*http://kb.mozillazine.org/Website_colors_are_wrong
There are extensions like Adblock Plus (Firefox/Tools > Add-ons > Extensions) and security software (firewall, anti-virus) that can block images and other content.
See also:
*https://support.mozilla.org/kb/Troubleshooting+extensions+and+themes
*http://kb.mozillazine.org/Images_or_animations_do_not_load
*http://kb.mozillazine.org/Websites_look_wrong

What unsafe content is blocked on this secured website?

On some (SSL) websites I see that some unsafe content is blocked. But I cannot get any information about the blocked content. What content is blocked? Is there any plugin where I can see a list of this content?
Thanx Jeroen

What secure site? You don't mean support.mozilla.org, do you? There shouldn't be any insecure content here.
# Press Ctrl+Shift+K to open the Web Console. See the following article for usage details.
#* https://developer.mozilla.org/en-US/docs/Tools/Web_Console
# Press the Clear button.
# Load the problematic page. For things like images, you'll see entries that say "Loading mixed (insecure) display content on a secure page" followed by the URL of the resource in question. I'm not sure what the verbiage is for blocked scripts. I'd guess if there's too much in the console to sort through, you can probably find what you're looking for by typing ''mixed'' into the search box in the top right.

Mixed SSL content not blocked by Firefox

Similar Messages

Maybe you are looking for