[Webkit-unassigned] [Bug 171934] Content from loopback addresses (e.g. 127.0.0.1) should not be considered mixed content

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Thu Jan 24 10:04:09 PST 2019


https://bugs.webkit.org/show_bug.cgi?id=171934

--- Comment #41 from Michael Catanzaro <mcatanzaro at igalia.com> ---
BTW the tests are in LayoutTests/http/tests/security/mixedContent. For example, in LayoutTests/http/tests/security/mixedContent/resources/frame-with-insecure-image.html, we could try changing this:

<img src="http://127.0.0.1:8080/security/resources/compass.jpg">

(which would be broken by this change), to this:

<img src="http://localhost:8080/security/resources/compass.jpg">

(which should still be blocked).

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20190124/6340641f/attachment-0001.html>


More information about the webkit-unassigned mailing list