Re: Mixed-content XHR Websockets

2013-07-30 Thread Nicholas Wilson
On 29 July 2013 17:47, Stefan Arentz sare...@mozilla.com wrote: Can CSP play a role here? What if my site is on https://foo.com and I set connect-src to http://foo.com ? Would that override the mixed content blocking? If not, is that something we should implement? Interesting idea. I'm

Re: Mixed-content XHR Websockets

2013-07-30 Thread Nicholas Wilson
On 27 July 2013 02:18, Daniel Veditz dved...@mozilla.com wrote: Uniformity is indeed important. Are you implying that some other browser is NOT blocking mixed-content WebSockets? Why is it only Firefox where you have to do long polling? If so we can take that information back to the standards