system
Describe <CVE-2020-26976>.
user
What is <CVE-2020-26976>?
assistant
When a HTTPS pages was embedded in a HTTP page, and there was a service worker registered for the former, the service worker could have intercepted the request for the secure page despite the iframe not being a secure context due to the (insecure) framing. This vulnerability affects Firefox < 84..