fixup! Bug 23247: Communicating security expectations for .onion (8cd7740e) · Commits · The Tor Project / Applications / Tor Browser

devtools/shared/network-observer/NetworkHelper.sys.mjs

+8 −1

Original line number	Diff line number	Diff line
		@@ -596,6 +596,9 @@ export var NetworkHelper = {

		// The request did not contain any security info.
		if (!securityInfo) {
		if (httpActivity.hostname && httpActivity.hostname.endsWith(".onion")) {
		info.state = "secure";
		}
		return info;
		}

		@@ -647,7 +650,11 @@ export var NetworkHelper = {
		// schemes other than https and wss are subject to
		// downgrade/etc at the scheme level and should always be
		// considered insecure
		if (httpActivity.hostname && httpActivity.hostname.endsWith(".onion")) {
		info.state = "secure";
		} else {
		info.state = "insecure";
		}
		} else if (state & wpl.STATE_IS_SECURE) {
		// The connection is secure if the scheme is sufficient
		info.state = "secure";