On 29 July 2013 17:47, Stefan Arentz sare...@mozilla.com wrote:
Can CSP play a role here?
What if my site is on https://foo.com and I set connect-src to http://foo.com
? Would that override the mixed content blocking? If not, is that something
we should implement?
Interesting idea. I'm
On 27 July 2013 02:18, Daniel Veditz dved...@mozilla.com wrote:
Uniformity is indeed important. Are you implying that some other browser
is NOT blocking mixed-content WebSockets? Why is it only Firefox where
you have to do long polling?
If so we can take that information back to the standards