| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | < 84.0 | 84.0 |
When a HTTPS pages was embedded in a HTTP page, and there was a service worker registered for the former, the service worker could have intercepted the request for the secure page despite the iframe not being a secure context due to the (insecure) framing. This vulnerability affects Firefox < 84.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free