Files
tubestation/dom/webbrowserpersist
Malte Jürgens 2fa5b90986 Bug 1909051 - Disable HTTPS-Only for drag-and-drop requests r=tschuster,win-reviewers,gstoll
HTTPS-Only should be disabled for any repeated request caused by a file
drag-and-drop, as HTTPS-Only may block the repeated request if it is insecure,
even if the original request was exempt from HTTPS-Only. Disabling HTTPS-Only
completely is fine in this case, because if we are dragging from an insecure
source, that source must already be exempt from HTTPS-Only, as it otherwise
would have been upgraded already by HTTPS-Only.

The changes in nsContentAreaDragDrop and nsWebBrowserPersist fix this problem on
macOS, the changes in widget/windows/nsDataObj fix it in Windows.

Differential Revision: https://phabricator.services.mozilla.com/D244905
2025-04-28 15:31:41 +00:00
..