From 8d6d17d46bbb11b5b3e0c281f72266a82ebb187b Mon Sep 17 00:00:00 2001 From: Thorin-Oakenpants Date: Fri, 21 Aug 2020 21:05:08 +0000 Subject: [PATCH] 1244: HTTPS-only mode: FF80+ site exceptions The option is not shown if https-only-mode is not being applied. I tested with `http://asmjs.org/` since it doesn't redirect/upgrade to secure. --- user.js | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/user.js b/user.js index 00e738d..f67ab24 100644 --- a/user.js +++ b/user.js @@ -734,8 +734,9 @@ user_pref("security.mixed_content.block_display_content", true); /* 1243: block unencrypted requests from Flash on encrypted pages to mitigate MitM attacks [FF59+] * [1] https://bugzilla.mozilla.org/1190623 ***/ user_pref("security.mixed_content.block_object_subrequest", true); -/* 1244: enable https-only-mode [FF76+] +/* 1244: enable HTTPS-Only mode [FF76+] * [NOTE] This is experimental + * [SETTING] to add site exceptions: Page Info>Permissions>Use insecure HTTP (FF80+) * [SETTING] Privacy & Security>HTTPS-Only Mode (FF81+) * [1] https://bugzilla.mozilla.org/1613063 */ // user_pref("dom.security.https_only_mode", true); // [FF76+]