When a HTTPS pages was embedded in a HTTP page, and there was a service worker registered for the former, the service worker could have intercepted the request for the secure page despite the iframe not being a secure context due to the (insecure) framing. This vulnerability affects Firefox < 84.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Firefox | Mozilla | * | 84.0 (excluding) |