<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>142340</bug_id>
          
          <creation_ts>2015-03-05 06:42:44 -0800</creation_ts>
          <short_desc>Insecure content warnings not emitted when favicon is restored from favicon cache?</short_desc>
          <delta_ts>2022-07-19 14:59:31 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>WebKitGTK</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>PC</rep_platform>
          <op_sys>Linux</op_sys>
          <bug_status>NEW</bug_status>
          <resolution></resolution>
          
          <see_also>https://bugs.webkit.org/show_bug.cgi?id=196182</see_also>
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          <blocked>140625</blocked>
          <everconfirmed>1</everconfirmed>
          <reporter name="Michael Catanzaro">mcatanzaro</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          <cc>bugs-noreply</cc>
    
    <cc>mcatanzaro</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1074499</commentid>
    <comment_count>0</comment_count>
    <who name="Michael Catanzaro">mcatanzaro</who>
    <bug_when>2015-03-05 06:42:44 -0800</bug_when>
    <thetext>Sometimes I get insecure content warnings for the favicon on *.gnome.org. Sometimes I don&apos;t. I haven&apos;t investigated yet but a reasonable guess is that the favicon is checked to be mixed content only when first downloaded, and the result is never stored to be used on subsequent loads from the cache, similar to bug #138127.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1885205</commentid>
    <comment_count>1</comment_count>
    <who name="Michael Catanzaro">mcatanzaro</who>
    <bug_when>2022-07-19 14:59:31 -0700</bug_when>
    <thetext>If we fix bug #219396, then we can close this issue as obsolete because the favicon cache should never contain insecure content.</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>