title: Does mixed content detection in browsers apply to data passed via AJAX?
body: <p>I'm struggling with support of our clients after Firefox update that disabled mixed content by default on the pages.</p>
  
  <p>I'm all for security and stuff, but can someone explain to me how what I'm doing is insecure and is there any way for me to handle it but call every client and explain to them how to disable mixed content via about:config in firefox?</p>
  
  <p>So the setup is like this: I have a webpage that communicate with proprietary devices with embedded http server that runs inside local network (so I can't query the devices from the server side, only from client side), while the pages are served via internet and https.</p>
  
  <p>Now when I request the data from the device via javascript (jQuery $.ajax) I'm getting blocked in recent firefox versions with mixed content exception.
  I cannot use http for the main page with javascript as it will be insecure for our clients and I can't change the devices that talk only in plain http, but I have to have my page that is delivered via https to read data from those devices via http.</p>
  
  <p>So the question is, why would it be insecure if the only thing that I'm reading is basically a text that will never be executed. Firefox allows images to load via http, so why not plain text?
  Anyone have any idea if it is possible to do this kind of request so it'll look like "passive" content or some other trick that will make it work without triggering active content blocking?
  Here's how the data is read on the page currently:</p>
  
  <pre><code>$.ajax({
        type: 'POST',
        url: deviceIp,
        dataType: 'text',
        crossDomain: 'true',
        timeout: 2500,
        data: parameterMap,
        success: function(data, textStatus, jqXHR) {
            // process data
        },
        error: function(jqXHR, textStatus, errorThrown) {
            // handle error
        }
  });
  </code></pre>