- Block non-http/https favicon copies in AsyncTryCopyFavicons; both source and destination must use http or https. - Block cross-domain favicon copies using eTLD+1 comparison; falls back to host for special schemes. Resolves false if eTLD service is unavailable. - Downgrade copyFavicons failure in TopSites from console.error to debug. - Mark TopSites-fetched icons as rich icons (isRich=true). - Adjust tests to use same-domain URIs for existing copy tests; add cross-domain and non-http/https tests. Differential Revision: https://phabricator.services.mozilla.com/D311126