Opened 9 years ago

Closed 8 years ago

#3073 closed defect (fixed)

HTTPS everywhere fails to handle X-ICON resources.

Reported by: cypherpunks Owned by: pde
Priority: Medium Milestone:
Component: HTTPS Everywhere/EFF-HTTPS Everywhere Version:
Severity: Keywords:
Cc: schoen Actual Points:
Parent ID: #3190 Points:
Reviewer: Sponsor:


Https Everywhere fails to fetch favicons or other link rel resources over https, preventing the blue adress bar on sites where favicons are specified on each page.

To reproduce the problem, visit

with the current ruleset from git. To view resources, rightclick on page, select "page info", then click media. Observe that everything is fetched over https except the favicon.

An example screenshot is provided.

Child Tickets

Attachments (1)

economist-example.png (266.9 KB) - added by cypherpunks 9 years ago.
economist everythng https except favicon.

Download all attachments as: .zip

Change History (6)

Changed 9 years ago by cypherpunks

Attachment: economist-example.png added

economist everythng https except favicon.

comment:1 Changed 9 years ago by mikeperry

11:25 <@pde> mikeperry may know the current status of this better than I
11:25 <@pde> there was a crazy bugzilla thread about that crash bug, which I never understood
11:27 <@pde>
13:11 < mikeperry> this thing again? oh man...
13:11 < mikeperry> I barely remember it. I think giorgio may have saved us

comment:2 Changed 9 years ago by pde

Status: newaccepted

comment:3 Changed 8 years ago by mikeperry

Parent ID: #3190

Possibly fixed by the API? Setting as child of #3190 for testing purposes.

comment:4 Changed 8 years ago by pde

Cc: schoen added

Seth wrote a test tool recently which persuaded me that this bug does not exist now that #3190 is fixed in mozilla-central / firefox 21. It's an open question whether the bug still exists in earlier firefox versions. The economist example is no longer applicable, so somebody should look to see if this is still reproducible in FF < 21.

comment:5 Changed 8 years ago by pde

Resolution: fixed
Status: acceptedclosed

FF 20 has the fix, so in any case this is now closed.

Note: See TracTickets for help on using tickets.