This doesn't mention images specifically -- anyone have insight into how that will work? I'm assuming they're not "active" content.
Even Google's image search displays insecure images, so I'd hope they get a pass.
Even Google's image search displays insecure images, so I'd hope they get a pass.
That means insecure scripts, stylesheets, plug-in contents, inline frames, Web fonts and WebSockets are blocked on secure pages, and a notification is displayed instead.
That seems to me like a complete list and does not include images.
This is in the latest Firefox Nightly build, and available as a pref in older Firefox versions, so you can play with it too.
Regex in CSS can be used to guess page content. Also CSS can load SVG which may include JavaScript.