aeris22’s avataraeris22’s Twitter Archive—№ 46,056

    1. …in reply to @firefox
      .@firefox Just a question : when this pop-up will pop ? HTTP-action form on HTTPS page ? HTTPS-action form on HTTP page ? Both ?
  1. …in reply to @aeris22
    .@firefox Easy bypass : - simulate password field with text field + js - start with https action but replace to http action on submit
    1. …in reply to @aeris22
      .@firefox The only secure as possible way I see here is to pop-up if any form on HTTP page or with HTTP action or on form HTTP-action submit