Skip to content

Weird UX of mixed media with HTTPS-Only and Safer mode

Steps to reproduce:

  1. Set Security Level to Safer
  2. Go to https://www.mixedcontentexamples.com/Test/NonSecureAudio
  3. Media is blocked, click to allow
  4. Firefox upgrades to HTTPS
  5. Media is blocked, again, and need to click again
  6. Media is then reproduced, but the click twice to allow doesn't feel very good

Another site that cannot be upgraded:

  1. Set Security Level to Safer
  2. Go to https://www.bennish.net/mixed-content.html
  3. Media are click to play, so click them
  4. The content cannot be loaded, and the NoScript banner reappears a few times
  5. Eventually, the user is left with non-working media, but cannot understand why (this is in part to blame on Firefox)
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information