commit 8d6d17d46bbb11b5b3e0c281f72266a82ebb187b
parent 9a37e1340c430cc9953f6a73226f286d12bd9746
Author: Thorin-Oakenpants <Thorin-Oakenpants@users.noreply.github.com>
Date: Fri, 21 Aug 2020 21:05:08 +0000
1244: HTTPS-only mode: FF80+ site exceptions
The option is not shown if https-only-mode is not being applied. I tested with `http://asmjs.org/` since it doesn't redirect/upgrade to secure.
Diffstat:
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/user.js b/user.js
@@ -734,8 +734,9 @@ user_pref("security.mixed_content.block_display_content", true);
/* 1243: block unencrypted requests from Flash on encrypted pages to mitigate MitM attacks [FF59+]
* [1] https://bugzilla.mozilla.org/1190623 ***/
user_pref("security.mixed_content.block_object_subrequest", true);
-/* 1244: enable https-only-mode [FF76+]
+/* 1244: enable HTTPS-Only mode [FF76+]
* [NOTE] This is experimental
+ * [SETTING] to add site exceptions: Page Info>Permissions>Use insecure HTTP (FF80+)
* [SETTING] Privacy & Security>HTTPS-Only Mode (FF81+)
* [1] https://bugzilla.mozilla.org/1613063 */
// user_pref("dom.security.https_only_mode", true); // [FF76+]