HTTPS Upgrades Test Page #15
+286
−20
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,23 @@ | ||
| <!DOCTYPE html> | ||
| <html lang="en"> | ||
| <head> | ||
| <meta charset="UTF-8"> | ||
| <meta name="viewport" content="width=device-width, initial-scale=1.0"> | ||
| <title>iframe HTTPS Upgrade Test</title> | ||
| </head> | ||
| <body> | ||
| <script> | ||
| const onMessage = msg => { | ||
| if (msg.data.action && msg.data.action === 'url') { | ||
| if (window.opener) { | ||
| window.opener.postMessage({url: document.location.href, type: msg.data.type}, '*'); | ||
| } else if (window.parent) { | ||
| window.parent.postMessage({url: document.location.href, type: msg.data.type}, '*'); | ||
| } | ||
| } | ||
| }; | ||
|
There was a problem hiding this comment. this page returns current url to either parent url (iframe scenario) or opener (window.open scenario). |
||
|
|
||
| window.addEventListener('message', onMessage); | ||
| </script> | ||
| </body> | ||
| </html> | ||
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,29 @@ | ||
| <!DOCTYPE html> | ||
| <html lang="en"> | ||
| <head> | ||
| <meta charset="UTF-8"> | ||
| <meta name="viewport" content="width=device-width, initial-scale=1.0"> | ||
| <title>HTTPS upgrades test page</title> | ||
|
|
||
| <script src='./main.js' defer></script> | ||
| <link href='./style.css' rel='stylesheet'></link> | ||
| </head> | ||
| <body> | ||
| <p><a href="../../">[Home]</a> ↣ <a href="../">[Privacy Protections Tests]</a> ↣ <strong>[HTTPS Upgrades Test Page]</strong></p> | ||
|
|
||
| <p>This page will test if requests and navigations to http pages get upgraded to https.</p> | ||
| <p>To test your https upgrading solution please add <storng>good.third-party.site</storng> domain to your upgrade list.</p> | ||
| <p>⚠️ Those tests will only work if this page is loaded over <strong>http</strong> (otherwise mixed content will be blocked).</p> | ||
|
|
||
| <p><button id='start'>Start test</button></p> | ||
|
|
||
| <details id='tests' hidden> | ||
| <summary id='tests-summary'></summary> | ||
| <ul id='tests-details'> | ||
| </ul> | ||
| </details> | ||
|
|
||
| <p><button id='download' disabled>Download the result</button></p> | ||
|
|
||
| </body> | ||
| </html> |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,195 @@ | ||
| const startButton = document.querySelector('#start'); | ||
| const downloadButton = document.querySelector('#download'); | ||
|
|
||
| const testsDiv = document.querySelector('#tests'); | ||
| const testsSummaryDiv = document.querySelector('#tests-summary'); | ||
| const testsDetailsDiv = document.querySelector('#tests-details'); | ||
|
|
||
| const TEST_DOMAIN = 'good.third-party.site'; | ||
|
|
||
| const tests = [ | ||
| { | ||
| id: 'upgrade-navigation', | ||
| run: () => { | ||
| let resolve, reject; | ||
| const promise = new Promise((res, rej) => {resolve = res; reject = rej}); | ||
| const otherWindow = window.open(`http://${TEST_DOMAIN}/privacy-protections/https-upgrades/frame.html`); | ||
|
|
||
| const interval = setInterval(() => { | ||
| otherWindow.postMessage({action: 'url', type: 'navigation'}, `http://${TEST_DOMAIN}/`); | ||
| otherWindow.postMessage({action: 'url', type: 'navigation'}, `https://${TEST_DOMAIN}/`); | ||
| }, 500); | ||
|
|
||
| function onMessage(m) { | ||
| if (m.data && m.data.type === 'navigation') { | ||
| clearInterval(interval); | ||
| otherWindow.close(); | ||
| window.removeEventListener('message', onMessage); | ||
| resolve(m.data.url); | ||
| } | ||
| } | ||
|
|
||
| window.addEventListener('message', onMessage); | ||
|
|
||
| return promise; | ||
| } | ||
| }, | ||
| { | ||
| id: 'upgrade-iframe', | ||
| run: () => { | ||
| let resolve, reject; | ||
| const promise = new Promise((res, rej) => {resolve = res; reject = rej}); | ||
|
|
||
| const iframe = document.createElement('iframe'); | ||
|
|
||
| iframe.addEventListener('load', i => { | ||
| iframe.contentWindow.postMessage({action: 'url', type: 'frame'}, `http://${TEST_DOMAIN}/`); | ||
| iframe.contentWindow.postMessage({action: 'url', type: 'frame'}, `https://${TEST_DOMAIN}/`); | ||
| }); | ||
|
|
||
| iframe.src = `http://${TEST_DOMAIN}/privacy-protections/https-upgrades/frame.html`; | ||
|
|
||
| document.body.appendChild(iframe); | ||
|
|
||
| function onMessage(m) { | ||
| if (m.data && m.data.type === 'frame') { | ||
| window.removeEventListener('message', onMessage); | ||
| document.body.removeChild(iframe); | ||
| resolve(m.data.url); | ||
| } | ||
| } | ||
|
|
||
| window.addEventListener('message', onMessage); | ||
|
|
||
| return promise; | ||
| } | ||
| }, | ||
| { | ||
| id: 'upgrade-subrequest', | ||
| run: () => { | ||
| return fetch(`http://${TEST_DOMAIN}/reflect-headers`) | ||
| .then(r => r.json()) | ||
| .then(data => data.url); | ||
| } | ||
| }, | ||
| { | ||
| id: 'upgrade-websocket', | ||
| run: () => { | ||
| let resolve, reject; | ||
| const promise = new Promise((res, rej) => {resolve = res; reject = rej}); | ||
|
|
||
| const websocketUrl = `ws://${TEST_DOMAIN}/block-me/web-socket`; | ||
| const socket = new WebSocket(websocketUrl); | ||
| socket.addEventListener('message', () => { | ||
| resolve(socket.url); | ||
| }); | ||
|
|
||
| return promise; | ||
| } | ||
| } | ||
| ]; | ||
|
|
||
| // object that contains results of all tests | ||
| const results = { | ||
| page: 'https-upgrades', | ||
| date: null, | ||
| results: [] | ||
| }; | ||
|
|
||
| function resultToHTML(data) { | ||
| if (Array.isArray(data)) { | ||
| return `<ul>${data.map(r => `<li>${r.test} - ${r.result}</li>`).join('')}</ul>`; | ||
| } else if (data) { | ||
| return JSON.stringify(data, null, 2); | ||
| } | ||
|
|
||
| return null; | ||
| } | ||
|
|
||
| /** | ||
| * Test runner | ||
| */ | ||
| function runTests() { | ||
| startButton.setAttribute('disabled', 'disabled'); | ||
| downloadButton.removeAttribute('disabled'); | ||
| testsDiv.removeAttribute('hidden'); | ||
|
|
||
| results.results.length = 0; | ||
| results.date = (new Date()).toUTCString(); | ||
| let all = 0; | ||
| let failed = 0; | ||
|
|
||
| testsDetailsDiv.innerHTML = ''; | ||
|
|
||
| function updateSummary() { | ||
| testsSummaryDiv.innerText = `Performed ${all} tests${failed > 0 ? ` (${failed} failed)` : ''}. Click for details.`; | ||
| } | ||
|
|
||
| for (const test of tests) { | ||
| const resultObj = { | ||
| id: test.id, | ||
| value: null | ||
| }; | ||
| results.results.push(resultObj); | ||
|
|
||
| const li = document.createElement('li'); | ||
| li.id = `test-${test.id.replace(' ', '-')}`; | ||
| li.innerHTML = `${test.id} - <span class='value'>…</span>`; | ||
| const valueSpan = li.querySelector('.value'); | ||
|
|
||
| testsDetailsDiv.appendChild(li); | ||
|
|
||
| try { | ||
| const result = test.run(); | ||
|
|
||
| if (result instanceof Promise) { | ||
| result | ||
| .then(data => { | ||
| valueSpan.innerHTML = resultToHTML(data); | ||
| resultObj.value = data || null; | ||
| }) | ||
| .catch(e => { | ||
| failed++; | ||
| valueSpan.innerHTML = `❌ error thrown ("${e.message ? e.message : e}")`; | ||
| updateSummary(); | ||
| }); | ||
| } else { | ||
| valueSpan.innerHTML = resultToHTML(data);; | ||
| resultObj.value = result || null; | ||
| } | ||
| } catch(e) { | ||
| failed++; | ||
| valueSpan.innerHTML = `❌ error thrown ("${e.message ? e.message : e}")`; | ||
| } | ||
|
|
||
| all++; | ||
| } | ||
|
|
||
| updateSummary(); | ||
|
|
||
| startButton.removeAttribute('disabled'); | ||
| } | ||
|
|
||
| function downloadTheResults() { | ||
| const data = JSON.stringify(results, null, 2); | ||
| const a = document.createElement('a'); | ||
| const url = window.URL.createObjectURL(new Blob([data], {type: 'application/json'})); | ||
| a.href = url; | ||
| a.download = 'fingerprinting-results.json'; | ||
|
|
||
| document.body.appendChild(a); | ||
| a.click(); | ||
|
|
||
| window.URL.revokeObjectURL(url); | ||
| a.remove(); | ||
| } | ||
|
|
||
| downloadButton.addEventListener('click', () => downloadTheResults()); | ||
|
|
||
| // run tests if button was clicked or… | ||
| startButton.addEventListener('click', () => runTests()); | ||
|
|
||
| // if url query is '?run' | ||
| if (document.location.search === '?run') { | ||
| runTests(); | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,7 @@ | ||
| * { | ||
| box-sizing: border-box; | ||
| } | ||
|
|
||
| .value { | ||
| color: gray; | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Some of those pages don't really work on github pages, which might be confusing, so I hardcoded full glitch urls.