Skip to content
This repository has been archived by the owner on Dec 11, 2019. It is now read-only.

Add an option to temporarily disable mixed content protection #3443

Closed
darkdh opened this issue Aug 26, 2016 · 4 comments
Closed

Add an option to temporarily disable mixed content protection #3443

darkdh opened this issue Aug 26, 2016 · 4 comments
Assignees
@darkdh
Labels
QA/checked-Linux QA/checked-macOS QA/checked-Win32 QA/checked-Win64 QA/test-plan-specified security
Milestone
0.12.0dev

Comments

@darkdh
Copy link
Member

darkdh commented Aug 26, 2016

Currently we cannot access resource like flash video of mixed content site (ex. https://forgetfulbc.blogspot.com/2016/08/lastweek-t3.html) and it will be upgraded to https by https everywhere so downgrade to http for this site is not working.

Firefox and Chrome provide an option to disable the protection temporarily

Firefox
screen shot 2016-08-26 at 13 15 34
screen shot 2016-08-26 at 13 16 48

Chrome
screen shot 2016-08-26 at 13 22 31
screen shot 2016-08-26 at 13 31 34

cc @diracdeltas
@darkdh darkdh self-assigned this Aug 26, 2016
darkdh added a commit to darkdh/browser-laptop that referenced this issue Aug 26, 2016
@darkdh
1. Add option to allow mixed content
33b40ff 
2. Change icon of http and mixed content to fa-unlock

fix brave#3443
@darkdh darkdh mentioned this issue Aug 26, 2016
Closed
3 tasks
darkdh added a commit to darkdh/browser-laptop that referenced this issue Aug 26, 2016
@darkdh
1. Add option to allow mixed content
1e1e80b 
2. Change icon of http and mixed content to fa-unlock

fix brave#3443
darkdh added a commit to darkdh/browser-laptop that referenced this issue Aug 27, 2016
@darkdh
1. Add option to allow mixed content
7a730db 
2. Change icon of http and mixed content to fa-unlock

fix brave#3443
darkdh added a commit to darkdh/browser-laptop that referenced this issue Aug 27, 2016
@darkdh
1. Add option to allow mixed content
d8bacb9 
2. Change icon of http and mixed content to fa-unlock

fix brave#3443
darkdh added a commit to darkdh/browser-laptop that referenced this issue Aug 27, 2016
@darkdh
1. Add option to allow mixed content
0b3abe7 
2. Change icon of http and mixed content to fa-unlock

fix brave#3443
darkdh added a commit to darkdh/electron that referenced this issue Aug 27, 2016
@darkdh
Emit block insecure content events
8feef49 
required by brave/browser-laptop#3443

auditors: @bridiver
@darkdh darkdh mentioned this issue Aug 27, 2016
Merged
darkdh added a commit to darkdh/browser-laptop that referenced this issue Aug 27, 2016
@darkdh
1. Add option to allow mixed content
b7025f9 
2. Change icon of http and mixed content to fa-unlock

fix brave#3443
reuire brave/muon#47
darkdh added a commit to darkdh/browser-laptop that referenced this issue Aug 27, 2016
@darkdh
1. Add option to allow mixed content
8c6af21 
2. Change icon of http and mixed content to fa-unlock

fix brave#3443
reuire brave/muon#47
darkdh added a commit to darkdh/browser-laptop that referenced this issue Aug 28, 2016
@darkdh
1. Add option to allow mixed content
66dc10c 
2. Change icon of http and mixed content to fa-unlock

fix brave#3443
reuire brave/muon#47
darkdh added a commit to darkdh/browser-laptop that referenced this issue Aug 31, 2016
@darkdh
1. Add option to allow mixed content
f1bca99 
2. Change icon of http and mixed content to fa-unlock

fix brave#3443
reuire brave/muon#47
@darkdh darkdh added this to the 1.0.0 milestone Aug 31, 2016
darkdh added a commit to darkdh/browser-laptop that referenced this issue Sep 1, 2016
@darkdh
1. Add option to allow mixed content
4888633 
2. Change icon of http and mixed content to fa-unlock
3. Remove twitch out of site hack
4. Add test

fix brave#3443
reuire brave/muon#47

Auditors: @bridiver

Test Plan:
Visit https://mixed-script.badssl.com/ and click the urlbar lock to
temporarily to allow run insecure content and the background color will be red.
darkdh added a commit to darkdh/browser-laptop that referenced this issue Sep 1, 2016
@darkdh
1. Add option to allow mixed content
49b6508 
2. Change icon of http and mixed content to fa-unlock
3. Remove twitch out of site hack
4. Add test

fix brave#3443
reuire brave/muon#47

Auditors: @bridiver

Test Plan:
Visit https://mixed-script.badssl.com/ and click the urlbar lock to
temporarily allow run insecure content and the background color will be red.
@bbondy bbondy modified the milestones: 0.12.0dev, 1.0.0 Sep 3, 2016
@alexwykoff alexwykoff mentioned this issue Sep 4, 2016
Closed
25 tasks
@alexwykoff
Copy link
Contributor

Test Plan:
Visit https://mixed-script.badssl.com/ and click the urlbar lock to
temporarily allow run insecure content and the background color will be red.

@luixxiul
Copy link
Contributor

luixxiul commented Sep 4, 2016

@darkdh is there any way of resetting the setting from the lock icon?

@luixxiul
Copy link
Contributor

luixxiul commented Sep 4, 2016

  1. Open https://badssl.com
  2. Click "mixed-script"
  3. Allow to load unsafe scripts
  4. Go back to the home page
  5. Click "mixed-script" again

You'll get "secure connection" and the red background at the same time.

@darkdh
Copy link
Member Author

darkdh commented Sep 4, 2016

@luixxiul , we need to restart the browser to reset the setting for now

@alexwykoff alexwykoff mentioned this issue Sep 5, 2016
Closed
30 tasks
This was referenced Sep 5, 2016
Closed
Closed
Closed
Closed
@alexwykoff alexwykoff mentioned this issue Sep 6, 2016
Closed
bridiver pushed a commit to brave/muon that referenced this issue Sep 17, 2016
@darkdh @bridiver
Emit block insecure content events
328b1d6 
required by brave/browser-laptop#3443

auditors: @bridiver
@Bucky24 Bucky24 mentioned this issue Oct 1, 2018
Closed
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees

@darkdh darkdh

Labels
QA/checked-Linux QA/checked-macOS QA/checked-Win32 QA/checked-Win64 QA/test-plan-specified security
Projects
None yet
Milestone
0.12.0dev
Development

Successfully merging a pull request may close this issue.

Add option to allow mixed content darkdh/browser-laptop
4 participants
@bbondy @alexwykoff @luixxiul @darkdh