Although Firefox has already patched exploits that have broken through its defenses, some of you, may have noticed that attackers have used HTTP links: https://images.squarespace-cdn.com/...cdc-8ec6-c6ef19f4ba5f/Media.jpeg?format=2500w https://images.squarespace-cdn.com/...b87f-3382a75246c0/Media (1).jpeg?format=2500w it would have been easy to prevent these exploits.
https://blog.mozilla.org/security/2025/05/17/firefox-security-response-to-pwn2own-2025/ And I would add that the attacks would also be blocked by the “Always HTTPS” feature if it was obviously set not to default.
