{"id":1143,"date":"2013-06-27T14:28:21","date_gmt":"2013-06-27T21:28:21","guid":{"rendered":"http:\/\/blog.mozilla.org\/security\/?p=1143"},"modified":"2013-06-27T14:28:21","modified_gmt":"2013-06-27T21:28:21","slug":"mixed-content-blocker-hits-firefox-beta","status":"publish","type":"post","link":"https:\/\/blog.mozilla.org\/security\/2013\/06\/27\/mixed-content-blocker-hits-firefox-beta\/","title":{"rendered":"Mixed Content Blocker hits Firefox Beta!"},"content":{"rendered":"

The Mixed Content Blocker we described last month<\/a> is now available in Firefox Beta and is on track for a general release in August with Firefox 23. When secure HTTPS pages load additional content insecurely over HTTP (a.k.a. Mixed Content), users are vulnerable to man-in-the-middle and eavesdropping attacks. The Mixed Content Blocker will block insecure active content by default, protecting our users from these attacks.<\/p>\n

Call to Users – Report problems<\/strong>
\nIf you find a website that isn’t functioning correctly because it contains insecure content that is being blocked by the Mixed Content Blocker, please let us know by sending an email to security@mozilla.org<\/a> or commenting in our compatibility tracking bug<\/a><\/p>\n

How can you tell if a site has Mixed Content that Firefox has blocked? Look for this Shield Icon in the location bar.<\/p>\n

\"Image:<\/a><\/p>\n

If you’d like to contribute further and help us find compatibility issues you can participate in our QA test day<\/a> on Monday, July 1st.<\/p>\n

Call to Web Developers – Test your site with Firefox Beta<\/strong>
\nIf you rely on HTTP resources in your HTTPS pages this feature might break your website. If you do find Mixed Content issues on your webpage in Firefox 23+, chances are that the same issues exist in Chrome and\/or Internet Explorer, who have also implemented this feature.<\/p>\n

The best way to tell if your site will load correctly in Firefox 23 is to download the latest Firefox Beta<\/a> and browse through your website with the Web Console<\/a> open. Enable the “Security” messages in Web Console and check for messages about Mixed Content.<\/p>\n

\"Image:<\/a><\/p>\n

If you want to test your site in a more automated fashion, you can try using Skipfish<\/a>, a web application security tool. Skipfish has a -M option that will report mixed content issues on your webpage.<\/p>\n

To fix your site, simply replace http:\/\/ links with their https:\/\/ equivalents on your SSL pages. You can also use protocol-relative links<\/a> if you use the same source code to serve your HTTP and HTTPS website.<\/p>\n

If the Mixed Content resources on your page come from a third party, there is a chance that the HTTPS equivalent version already exists. For example, youtube.com has both HTTP and HTTPS video embed options. If the HTTPS version does not exist, consider contacting the third party (especially if they are one of your partners) and ask them to provide an HTTPS version of the content.<\/p>\n

Call to Contributors – Contact Sites<\/strong>
\nWe’ve been working on site compatibility issues, trying to find websites that are affected by the Mixed Content Blocker and alert them before Firefox 23 is released in August. However, finding accurate contact information for the affected sites has been a difficult task. And we could really use some help \ud83d\ude09<\/p>\n

If you would like to contribute, please take a look at the list of affected sites<\/a> and see if you can contact their website administrators and inform them of the Mixed Content compatibility issues that they are about to run into with Firefox 23 (and likely already have with Chrome or Internet Explorer). If you are able to find contact information and\/or alert the website please let us know in the associated bug.<\/p>\n

You can also help find more affected sites by participating in our QA test day<\/a> on Monday, July 1st.<\/p>\n

Want to Learn More?<\/strong>
\nCheck out a more detailed blog post on this feature here<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"

The Mixed Content Blocker we described last month is now available in Firefox Beta and is on track for a general release in August with Firefox 23. When secure HTTPS … Read more<\/a><\/p>\n","protected":false},"author":412,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[69],"tags":[],"coauthors":[],"yoast_head":"\nMixed Content Blocker hits Firefox Beta! - Mozilla Security Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/blog.mozilla.org\/security\/2013\/06\/27\/mixed-content-blocker-hits-firefox-beta\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Tanvi Vyas\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/blog.mozilla.org\/security\/2013\/06\/27\/mixed-content-blocker-hits-firefox-beta\/\",\"url\":\"https:\/\/blog.mozilla.org\/security\/2013\/06\/27\/mixed-content-blocker-hits-firefox-beta\/\",\"name\":\"Mixed Content Blocker hits Firefox Beta! - Mozilla Security Blog\",\"isPartOf\":{\"@id\":\"https:\/\/blog.mozilla.org\/security\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/blog.mozilla.org\/security\/2013\/06\/27\/mixed-content-blocker-hits-firefox-beta\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/blog.mozilla.org\/security\/2013\/06\/27\/mixed-content-blocker-hits-firefox-beta\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/blog.mozilla.org\/security\/files\/2013\/06\/FigureA1.jpg\",\"datePublished\":\"2013-06-27T21:28:21+00:00\",\"dateModified\":\"2013-06-27T21:28:21+00:00\",\"author\":{\"@id\":\"https:\/\/blog.mozilla.org\/security\/#\/schema\/person\/94b89a1b3d28fe214eb7543734810143\"},\"breadcrumb\":{\"@id\":\"https:\/\/blog.mozilla.org\/security\/2013\/06\/27\/mixed-content-blocker-hits-firefox-beta\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/blog.mozilla.org\/security\/2013\/06\/27\/mixed-content-blocker-hits-firefox-beta\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/blog.mozilla.org\/security\/2013\/06\/27\/mixed-content-blocker-hits-firefox-beta\/#primaryimage\",\"url\":\"https:\/\/blog.mozilla.org\/security\/files\/2013\/06\/FigureA1.jpg\",\"contentUrl\":\"https:\/\/blog.mozilla.org\/security\/files\/2013\/06\/FigureA1.jpg\",\"width\":643,\"height\":86,\"caption\":\"Image: A small shield icon is shown before the web page address in the location bar when Firefox has blocked Mixed Active Content.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/blog.mozilla.org\/security\/2013\/06\/27\/mixed-content-blocker-hits-firefox-beta\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/blog.mozilla.org\/security\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Mixed Content Blocker hits Firefox Beta!\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/blog.mozilla.org\/security\/#website\",\"url\":\"https:\/\/blog.mozilla.org\/security\/\",\"name\":\"Mozilla Security Blog\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/blog.mozilla.org\/security\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/blog.mozilla.org\/security\/#\/schema\/person\/94b89a1b3d28fe214eb7543734810143\",\"name\":\"Tanvi Vyas\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/blog.mozilla.org\/security\/#\/schema\/person\/image\/bd13e40bb691b46158cd2d4da792993d\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/9f4d447f27c116342ba41a747802372d?s=96&d=identicon&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/9f4d447f27c116342ba41a747802372d?s=96&d=identicon&r=g\",\"caption\":\"Tanvi Vyas\"},\"description\":\"Security\/Privacy Engineer and Tech Lead at Mozilla - @TanviHacks\",\"sameAs\":[\"https:\/\/blog.mozilla.org\/tanvi\/\",\"https:\/\/x.com\/@TanviHacks\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Mixed Content Blocker hits Firefox Beta! - Mozilla Security Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/blog.mozilla.org\/security\/2013\/06\/27\/mixed-content-blocker-hits-firefox-beta\/","twitter_misc":{"Written by":"Tanvi Vyas","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/blog.mozilla.org\/security\/2013\/06\/27\/mixed-content-blocker-hits-firefox-beta\/","url":"https:\/\/blog.mozilla.org\/security\/2013\/06\/27\/mixed-content-blocker-hits-firefox-beta\/","name":"Mixed Content Blocker hits Firefox Beta! - Mozilla Security Blog","isPartOf":{"@id":"https:\/\/blog.mozilla.org\/security\/#website"},"primaryImageOfPage":{"@id":"https:\/\/blog.mozilla.org\/security\/2013\/06\/27\/mixed-content-blocker-hits-firefox-beta\/#primaryimage"},"image":{"@id":"https:\/\/blog.mozilla.org\/security\/2013\/06\/27\/mixed-content-blocker-hits-firefox-beta\/#primaryimage"},"thumbnailUrl":"https:\/\/blog.mozilla.org\/security\/files\/2013\/06\/FigureA1.jpg","datePublished":"2013-06-27T21:28:21+00:00","dateModified":"2013-06-27T21:28:21+00:00","author":{"@id":"https:\/\/blog.mozilla.org\/security\/#\/schema\/person\/94b89a1b3d28fe214eb7543734810143"},"breadcrumb":{"@id":"https:\/\/blog.mozilla.org\/security\/2013\/06\/27\/mixed-content-blocker-hits-firefox-beta\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/blog.mozilla.org\/security\/2013\/06\/27\/mixed-content-blocker-hits-firefox-beta\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blog.mozilla.org\/security\/2013\/06\/27\/mixed-content-blocker-hits-firefox-beta\/#primaryimage","url":"https:\/\/blog.mozilla.org\/security\/files\/2013\/06\/FigureA1.jpg","contentUrl":"https:\/\/blog.mozilla.org\/security\/files\/2013\/06\/FigureA1.jpg","width":643,"height":86,"caption":"Image: A small shield icon is shown before the web page address in the location bar when Firefox has blocked Mixed Active Content."},{"@type":"BreadcrumbList","@id":"https:\/\/blog.mozilla.org\/security\/2013\/06\/27\/mixed-content-blocker-hits-firefox-beta\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/blog.mozilla.org\/security\/"},{"@type":"ListItem","position":2,"name":"Mixed Content Blocker hits Firefox Beta!"}]},{"@type":"WebSite","@id":"https:\/\/blog.mozilla.org\/security\/#website","url":"https:\/\/blog.mozilla.org\/security\/","name":"Mozilla Security Blog","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/blog.mozilla.org\/security\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/blog.mozilla.org\/security\/#\/schema\/person\/94b89a1b3d28fe214eb7543734810143","name":"Tanvi Vyas","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blog.mozilla.org\/security\/#\/schema\/person\/image\/bd13e40bb691b46158cd2d4da792993d","url":"https:\/\/secure.gravatar.com\/avatar\/9f4d447f27c116342ba41a747802372d?s=96&d=identicon&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/9f4d447f27c116342ba41a747802372d?s=96&d=identicon&r=g","caption":"Tanvi Vyas"},"description":"Security\/Privacy Engineer and Tech Lead at Mozilla - @TanviHacks","sameAs":["https:\/\/blog.mozilla.org\/tanvi\/","https:\/\/x.com\/@TanviHacks"]}]}},"_links":{"self":[{"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/posts\/1143"}],"collection":[{"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/users\/412"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/comments?post=1143"}],"version-history":[{"count":0,"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/posts\/1143\/revisions"}],"wp:attachment":[{"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/media?parent=1143"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/categories?post=1143"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/tags?post=1143"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/coauthors?post=1143"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}