On Tue, Dec 5, 2017 at 10:29 PM, Xidorn Quan <m...@upsuper.org> wrote:
> On Wed, Dec 6, 2017, at 01:25 AM, Dragana Damjanovic wrote: > > Hi all, > > > > We have implemented this for a log time, but the pref was turned off. > > I intend to switch on the pref for this in bug 1423146. > > After the pref is switched a http-authentication dialog prompt will not > > be > > shown if it is triggered by an image resource from a cross-origin. > > Would this affect authentication from proxy? For example, if the > cross-origin image is on a domain which PAC decides to use proxy for, > and the proxy requires authentication, would the dialog prompt for it be > suppressed as well? If so, it sounds a bit unfortunate. > > Good point. Currently it would be blocked. I think we should change that. I will file a bug (I will also leave the security team to have a final word). dragana > - Xidorn > _______________________________________________ > dev-platform mailing list > dev-platform@lists.mozilla.org > https://lists.mozilla.org/listinfo/dev-platform > _______________________________________________ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform
