{"action":"created","issue":{"url":"https://api.github.com/repos/slightlyoff/ServiceWorker/issues/813","labels_url":"https://api.github.com/repos/slightlyoff/ServiceWorker/issues/813/labels{/name}","comments_url":"https://api.github.com/repos/slightlyoff/ServiceWorker/issues/813/comments","events_url":"https://api.github.com/repos/slightlyoff/ServiceWorker/issues/813/events","html_url":"https://github.com/slightlyoff/ServiceWorker/issues/813","id":125389276,"number":813,"title":"Should mixed content always be blocked?","user":{"login":"delapuente","id":757942,"avatar_url":"https://avatars.githubusercontent.com/u/757942?v=3","gravatar_id":"","url":"https://api.github.com/users/delapuente","html_url":"https://github.com/delapuente","followers_url":"https://api.github.com/users/delapuente/followers","following_url":"https://api.github.com/users/delapuente/following{/other_user}","gists_url":"https://api.github.com/users/delapuente/gists{/gist_id}","starred_url":"https://api.github.com/users/delapuente/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/delapuente/subscriptions","organizations_url":"https://api.github.com/users/delapuente/orgs","repos_url":"https://api.github.com/users/delapuente/repos","events_url":"https://api.github.com/users/delapuente/events{/privacy}","received_events_url":"https://api.github.com/users/delapuente/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/slightlyoff/ServiceWorker/labels/fetch","name":"fetch","color":"bfd4f2"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":3,"created_at":"2016-01-07T12:58:24Z","updated_at":"2016-01-21T14:44:12Z","closed_at":null,"body":"Currently, trying to fetch content served by HTTP inside a service worker results in the request being blocked by the UA. Is this the expected behaviour? If so, which parts of the current specification support it?\r\n\r\nI found this comment in a Chrome bug, referring to that:\r\nhttps://code.google.com/p/chromium/issues/detail?id=448672#c4\r\n\r\nIt says fetch is not an optionally blockable request context but the [_should fetching request be blocked as mixed content_ algorithm](https://w3c.github.io/webappsec-mixed-content/#should-block-fetch) and [should response to request be blocked as mixed content](https://w3c.github.io/webappsec-mixed-content/#should-block-response) state [passthrough requests](https://w3c.github.io/webappsec-mixed-content/#passthrough-request) should be **allowed** (maybe with an opaque response, but that's another story)."},"comment":{"url":"https://api.github.com/repos/slightlyoff/ServiceWorker/issues/comments/173591483","html_url":"https://github.com/slightlyoff/ServiceWorker/issues/813#issuecomment-173591483","issue_url":"https://api.github.com/repos/slightlyoff/ServiceWorker/issues/813","id":173591483,"user":{"login":"jakearchibald","id":93594,"avatar_url":"https://avatars.githubusercontent.com/u/93594?v=3","gravatar_id":"","url":"https://api.github.com/users/jakearchibald","html_url":"https://github.com/jakearchibald","followers_url":"https://api.github.com/users/jakearchibald/followers","following_url":"https://api.github.com/users/jakearchibald/following{/other_user}","gists_url":"https://api.github.com/users/jakearchibald/gists{/gist_id}","starred_url":"https://api.github.com/users/jakearchibald/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jakearchibald/subscriptions","organizations_url":"https://api.github.com/users/jakearchibald/orgs","repos_url":"https://api.github.com/users/jakearchibald/repos","events_url":"https://api.github.com/users/jakearchibald/events{/privacy}","received_events_url":"https://api.github.com/users/jakearchibald/received_events","type":"User","site_admin":false},"created_at":"2016-01-21T14:44:12Z","updated_at":"2016-01-21T14:44:12Z","body":"We either prevent mixed content going into the cache, or need to provide a hook to show a mix warning on response, if the cache is returning a mix asset."}}