Git/thunderbird-user.js
1
0
Fork 0
mirror of https://github.com/HorlogeSkynet/thunderbird-user.js.git synced 2026-09-14 05:38:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

sec: restores security.mixed_content.block_active_content (1240)

Browse Source 
This preference has been dropped in 5342ec1619 (see #15) but actually
seems to still be disabled by default in Thunderbird. Let's enforce it for the time being.

Closes: #72
This commit is contained in:
Samuel FORESTIER
2026-09-12 21:19:36 +02:00
parent 434cc5bc46
commit 632eef3e30
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
user.js
+3
View File
@@ -470,6 +470,9 @@ user_pref("security.pki.crlite_mode", 2);
// user_pref("security.osclientcerts.autoload", true);
/** MIXED CONTENT ***/
/* 1240: disable insecure active content on https pages
* [1] https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/21323 ***/
user_pref("security.mixed_content.block_active_content", true);
/* 1241: disable insecure passive content (such as images) on https pages ***/
user_pref("security.mixed_content.block_display_content", true); // Defense-in-depth (see 1244)
/* 1244: enable HTTPS-Only mode in all windows