Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Flag mixed-content in https pages #7

Closed
davidearl opened this issue Jul 26, 2016 · 1 comment · Fixed by #27
Closed

Flag mixed-content in https pages #7

davidearl opened this issue Jul 26, 2016 · 1 comment · Fixed by #27

Comments

@davidearl
Copy link

davidearl commented Jul 26, 2016

Since pretty much all browsers block http embedding in https pages, can I suggest that the W3C link checker could usefully check this condition. (Of course if the source is not via a URL, you'd have to have a check box or some such indicating the source is intended to be served over https, but in the normal case where someone is checking a remote site, you'd already know this). I'm talking about ,

@tripu tripu changed the title checking src="hhtp://..." and similar in https pages checking src="http://..." and similar in https pages Jul 26, 2016
@dontcallmedom
Copy link
Member

A note on this (good) idea: it should take into account the Upgrade-Insecure-Requests header when flagging mixed-content embedded resources.

@dontcallmedom dontcallmedom changed the title checking src="http://..." and similar in https pages Flag mixed-content in https pages Mar 8, 2019
This was referenced Jan 10, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants