CodeMirror/uMatrix
1
0
Fork 0
mirror of https://github.com/gorhill/uMatrix.git synced 2024-06-02 18:34:52 +12:00
Code Issues Releases Wiki Activity

Updated Per scope switches (markdown)

gorhill 2014-11-20 06:25:01 -08:00
parent 75d57bd973
commit 43d0572293
1 changed files with 6 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
Per-scope-switches.md

@ -16,6 +16,12 @@ Following is a list of the currently existing per-scope switches.
#### Strict HTTPS
First, if you are not familiar with what is "mixed content", here are some places to learn more about it:
- [Mozilla Developer Network: Mixed Content](https://developer.mozilla.org/en-US/docs/Security/MixedContent)
- [Qualys Blog: HTTPS Mixed Content: Still the Easiest Way to Break SSL](https://community.qualys.com/blogs/securitylabs/2014/03/19/https-mixed-content-still-the-easiest-way-to-break-ssl)
- [W3C: Mixed Content](https://w3c.github.io/webappsec/specs/mixedcontent/)
When the _"Strict HTTPS"_ switch is turned on, mixed content will be forbidden.
To witness _"Strict HTTPS"_ at work, visit the encrypted version of Wired's [Threat Post](https://threatpost.com/), which suffers (at time of writing, 2014-11) from mixed content: