Bug 1804684 - Fragment navigation may change document URI scheme from https to http r=smaug

Differential Revision: https://phabricator.services.mozilla.com/D165282

docshell/base/nsDocShell.h

@@ -1067,6 +1067,9 @@ class nsDocShell final : public nsDocLoader,
 
   // Check to see if we're loading a prior history entry or doing a fragment
   // navigation in the same document.
+  // NOTE: In case we are doing a fragment navigation, and HTTPS-Only/ -First
+  // mode is enabled and upgraded the underlying document, we update the URI of
+  // aLoadState from HTTP to HTTPS (if neccessary).
   bool IsSameDocumentNavigation(nsDocShellLoadState* aLoadState,
                                 SameDocumentNavigationState& aState);