description: When a HTTPS pages was embedded in a HTTP page, and there was a service worker registered for the former, the service worker could have intercepted the request for the secure page despite the iframe not being a secure context due to the (insecure) framing. This vulnerability affects Firefox < 84.
problem types: HTTPS pages could have been intercepted by a registered service worker when they should not have been
affected:
{
product: Firefox
vendor: Mozilla
versions:
lessThan: 84, status: affected, version: unspecified, versionType: custom
}