make 1241 inactive

this is redundant with HoM which as the name says is secure ONLY, including sub-resources
This commit is contained in:
Thorin-Oakenpants 2022-11-18 19:26:18 +00:00 committed by GitHub
parent 4e1cb6e03e
commit fee888ad15
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -491,8 +491,8 @@ user_pref("security.remote_settings.crlite_filters.enabled", true);
user_pref("security.pki.crlite_mode", 2);
/** MIXED CONTENT ***/
/* 1241: disable insecure passive content (such as images) on https pages [SETUP-WEB] ***/
user_pref("security.mixed_content.block_display_content", true);
/* 1241: disable insecure passive content (such as images) on https pages ***/
// user_pref("security.mixed_content.block_display_content", true); // Defense-in-depth (see 1244)
/* 1244: enable HTTPS-Only mode in all windows [FF76+]
* When the top-level is HTTPS, insecure subresources are also upgraded (silent fail)
* [SETTING] to add site exceptions: Padlock>HTTPS-Only mode>On (after "Continue to HTTP Site")