fune/browser/components/controlcenter/content/identityPanel.inc.xhtml
Malte Juergens 05a00d1692 Bug 1720458: Do not isolate https-only-load-insecure by origin attributes r=fluent-reviewers,settings-reviewers,flod,ckerschb,Gijs
Do not isolate `https-only-load-insecure` by origin attributes. This way the HTTPS-Only exceptions will behave similar to the `cookie` permission. This means that exceptions set in the system settings will also apply to private windows, but exceptions set in private windows via the identity pane will be reset after closing the browser.

Depends on D182761

Differential Revision: https://phabricator.services.mozilla.com/D183745
2023-07-24 13:31:19 +00:00

206 lines
12 KiB
HTML

<!-- This Source Code Form is subject to the terms of the Mozilla Public
- License, v. 2.0. If a copy of the MPL was not distributed with this
- file, You can obtain one at http://mozilla.org/MPL/2.0/. -->
<html:template id="template-identity-popup">
<panel id="identity-popup"
class="panel-no-padding"
type="arrow"
role="alertdialog"
noautofocus="true"
aria-labelledby="identity-popup-mainView-panel-header-span"
onpopupshown="gIdentityHandler.onPopupShown(event);"
onpopuphidden="gIdentityHandler.onPopupHidden(event);"
orient="vertical">
<panelmultiview id="identity-popup-multiView"
mainViewId="identity-popup-mainView">
<panelview id="identity-popup-mainView" class="PanelUI-subView" role="document" showheader="true">
<box id="identity-popup-mainView-panel-header" class="panel-header">
<html:h1>
<html:span id="identity-popup-mainView-panel-header-span" role="heading" aria-level="1"/>
</html:h1>
</box>
<toolbarseparator/>
<vbox class="panel-subview-body">
<toolbarbutton id="identity-popup-security-button"
class="identity-popup-security-connection subviewbutton subviewbutton-iconic"
oncommand="gIdentityHandler.showSecuritySubView();">
<image class="identity-popup-security-connection-icon toolbarbutton-icon"></image>
<hbox class="toolbarbutton-text" flex="1">
<label class="identity-popup-connection-not-secure"
when-connection="not-secure secure-cert-user-overridden secure-custom-root cert-error-page https-only-error-page" data-l10n-id="identity-connection-not-secure"></label>
<label class="identity-popup-connection-secure"
when-connection="secure secure-ev" data-l10n-id="identity-connection-secure"></label>
<label class="identity-popup-connection-failure"
when-connection="net-error-page" data-l10n-id="identity-connection-failure"></label>
<label when-connection="chrome" data-l10n-id="identity-connection-internal"></label>
<label when-connection="file" data-l10n-id="identity-connection-file"></label>
<label when-connection="extension" data-l10n-id="identity-extension-page"></label>
<label class="identity-popup-connection-secure upgraded" when-httpsonlystatus="upgraded failed-sub"
data-l10n-id="identity-https-only-connection-upgraded"></label>
</hbox>
</toolbarbutton>
<!-- Security Section -->
<hbox id="identity-popup-security" class="identity-popup-section indented" flex="1">
<vbox class="identity-popup-security-content" flex="1">
<vbox id="identity-popup-security-description">
<description id="identity-popup-security-ev-content-owner"
when-connection="secure-ev"/>
<description class="identity-popup-warning-box identity-popup-warning-gray"
when-mixedcontent="active-blocked" data-l10n-id="identity-active-blocked"></description>
<description id="identity-popup-security-decription-custom-root"
class="identity-popup-warning-box identity-popup-warning-gray"
when-customroot="true" data-l10n-id="identity-custom-root"></description>
<description class="identity-popup-warning-box identity-popup-warning-yellow"
when-mixedcontent="passive-loaded" data-l10n-id="identity-passive-loaded"></description>
<description class="identity-popup-warning-box identity-popup-warning-yellow"
when-mixedcontent="active-loaded" data-l10n-id="identity-active-loaded"></description>
<description class="identity-popup-warning-box identity-popup-warning-yellow"
when-ciphers="weak" data-l10n-id="identity-weak-encryption"></description>
</vbox>
<vbox id="identity-popup-security-httpsonlymode" when-httpsonlystatus="exception upgraded failed-top failed-sub">
<label flex="1" data-l10n-id="identity-https-only-label2"></label>
<menulist id="identity-popup-security-httpsonlymode-menulist"
oncommand="gIdentityHandler.changeHttpsOnlyPermission();" sizetopopup="none">
<menupopup>
<menuitem value="0" data-l10n-id="identity-https-only-dropdown-on" />
<menuitem value="1" data-l10n-id="identity-https-only-dropdown-off"
id="identity-popup-security-menulist-off-item" />
<menuitem value="2" data-l10n-id="identity-https-only-dropdown-off-temporarily" />
</menupopup>
</menulist>
<vbox id="identity-popup-security-httpsonlymode-info">
<description when-httpsonlystatus="exception" flex="1" data-l10n-id="identity-https-only-info-turn-on3">
</description>
<description when-httpsonlystatus="failed-sub" flex="1" data-l10n-id="identity-https-only-info-turn-off3">
</description>
<description when-httpsonlystatus="failed-top" flex="1" data-l10n-id="identity-https-only-info-no-upgrade">
</description>
</vbox>
</vbox>
</vbox>
</hbox>
</vbox>
<!-- Clear Site Data Button -->
<vbox id="identity-popup-clear-sitedata-footer"
class="panel-subview-footer-button"
hidden="true">
<toolbarseparator/>
<toolbarbutton id="identity-popup-clear-sitedata-button"
data-l10n-id="identity-clear-site-data"
class="subviewbutton"
oncommand="gIdentityHandler.clearSiteData(event);"/>
</vbox>
</panelview>
<!-- Security SubView -->
<panelview id="identity-popup-securityView"
class="PanelUI-subView"
role="document">
<vbox class="panel-subview-body">
<hbox class="identity-popup-security-connection identity-popup-section" align="center">
<image class="identity-popup-security-connection-icon"/>
<description class="identity-popup-connection-not-secure security-view"
when-connection="not-secure secure-cert-user-overridden cert-error-page net-error-page https-only-error-page" data-l10n-id="identity-connection-not-secure-security-view"></description>
<description class="identity-popup-connection-secure security-view"
when-connection="secure secure-ev" data-l10n-id="identity-connection-verified"></description>
</hbox>
<vbox id="identity-popup-securityView-extended-info" class="identity-popup-section">
<!-- (EV) Certificate Information -->
<description id="identity-popup-content-owner-label"
when-connection="secure-ev" data-l10n-id="identity-ev-owner-label"></description>
<description id="identity-popup-content-owner"
when-connection="secure-ev"
class="header"/>
<description id="identity-popup-content-supplemental"
when-connection="secure-ev"/>
<description id="identity-popup-content-verifier"
when-connection="secure secure-ev secure-cert-user-overridden"/>
<description id="identity-popup-content-verifier-unknown"
class="identity-popup-warning-box identity-popup-warning-gray"
when-customroot="true">
<label data-l10n-id="identity-description-custom-root2"/>
<html:a is="moz-support-link" id="identity-popup-custom-root-learn-more" support-page="enterprise-roots"/>
</description>
<!-- Remove Certificate Exception -->
<button when-connection="secure-cert-user-overridden"
data-l10n-id="identity-remove-cert-exception"
class="panel-button"
oncommand="gIdentityHandler.removeCertException()"/>
<!-- Connection is Not Secure -->
<description when-connection="not-secure cert-error-page net-error-page https-only-error-page"
data-l10n-id="identity-description-insecure"></description>
<!-- Weak Cipher -->
<description when-ciphers="weak" data-l10n-id="identity-description-weak-cipher-intro"></description>
<description class="identity-popup-warning-box identity-popup-warning-yellow"
when-ciphers="weak" data-l10n-id="identity-description-weak-cipher-risk"></description>
<!-- Active Mixed Content Blocked -->
<description class="identity-popup-warning-box identity-popup-warning-gray"
when-mixedcontent="active-blocked">
<label data-l10n-id="identity-description-active-blocked2"/>
<html:a is="moz-support-link" class="identity-popup-mcb-learn-more" support-page="mixed-content"/>
</description>
<!-- Passive Mixed Content Loaded -->
<description when-mixedcontent="passive-loaded" data-l10n-id="identity-description-passive-loaded"></description>
<description class="identity-popup-warning-box identity-popup-warning-yellow"
when-mixedcontent="passive-loaded">
<label data-l10n-id="identity-description-passive-loaded-insecure2"/>
<html:a is="moz-support-link" class="identity-popup-mcb-learn-more" support-page="mixed-content"/>
</description>
<!-- Passive Mixed Content Loaded, Active Mixed Content Blocked -->
<description when-mixedcontent="passive-loaded active-blocked" data-l10n-id="identity-description-passive-loaded"></description>
<description when-mixedcontent="passive-loaded active-blocked"
class="identity-popup-warning-box identity-popup-warning-yellow">
<label data-l10n-id="identity-description-passive-loaded-mixed2"/>
<html:a is="moz-support-link" class="identity-popup-mcb-learn-more" support-page="mixed-content"/>
</description>
<!-- Active Mixed Content Blocking Disabled -->
<description when-mixedcontent="active-loaded"
data-l10n-id="identity-description-active-loaded"></description>
<description when-mixedcontent="active-loaded"
data-l10n-id="identity-description-active-loaded-insecure"></description>
<hbox>
<html:a is="moz-support-link" when-mixedcontent="active-loaded"
and-when-loginforms="secure" class="identity-popup-mcb-learn-more" support-page="mixed-content"/>
</hbox>
<!-- Buttons to enable/disable mixed content blocking. -->
<button when-mixedcontent="active-blocked"
data-l10n-id="identity-disable-mixed-content-blocking"
class="panel-button"
oncommand="gIdentityHandler.disableMixedContentProtection()"/>
<button when-mixedcontent="active-loaded"
data-l10n-id="identity-enable-mixed-content-blocking"
class="panel-button"
oncommand="gIdentityHandler.enableMixedContentProtection()"/>
</vbox>
</vbox>
<vbox id="identity-popup-more-info-footer">
<!-- More Security Information -->
<toolbarseparator />
<toolbarbutton id="identity-popup-more-info"
data-l10n-id="identity-more-info-link-text"
class="subviewbutton panel-subview-footer-button"
oncommand="gIdentityHandler.handleMoreInfoClick(event);"/>
</vbox>
</panelview>
</panelmultiview>
</panel>
</html:template>