Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

"Mixed Content" error for blocked requests not intercept-able #2142

Closed
CSchuetz7 opened this issue Mar 5, 2018 · 3 comments
Closed

"Mixed Content" error for blocked requests not intercept-able #2142

CSchuetz7 opened this issue Mar 5, 2018 · 3 comments

Comments

@CSchuetz7
Copy link

CSchuetz7 commented Mar 5, 2018

Steps to reproduce

Tell us about your environment:

What steps will reproduce the problem?
Load a page over https:// that has a http:// resource embeded in an <iframe> object.
(Example page: https://a.df-srv.de/v2/view/lePQD7Tyr8SNUYizE5Yy/a.html)

The debug console if devtools:true is enabled will show:
Mixed Content: The page at 'https://a.df-srv.de/v2/view/lePQD7Tyr8SNUYizE5Yy/a.html' was loaded over HTTPS, but requested an insecure resource 'http://ende.de/'. This request has been blocked; the content must be served over HTTPS.

However this message is not seen by puppeteer, even in the DEBUG=puppeteer:* logs there is no sign of the blocked request.

Please include code that reproduces the issue.

  1. Load https://a.df-srv.de/v2/view/lePQD7Tyr8SNUYizE5Yy/a.html
  2. See Mixed Content: The page at 'https://a.df-srv.de/v2/view/lePQD7Tyr8SNUYizE5Yy/a.html' was loaded over HTTPS, but requested an insecure resource 'http://ende.de/'. This request has been blocked; the content must be served over HTTPS.
  3. Not intercept-able via requestfailed, Network.loadingFailed, Network.requestIntercepted, Network.requestWillBeSent or any other event.

What is the expected result?

Some way to catch the blocked Mixed Content log shown in the debug console.

What happens instead?

Nothing.

@MichaelErmer
Copy link

Related #1936

@aslushnikov
Copy link
Contributor

These violations are reported via the Log domain that we don't enable yet. We need to enable domain and introduce a new page event that forwards messages
from Log domain to the clients.

I'll be happy to review a PR.

@aslushnikov
Copy link
Contributor

Closing as dupe of #1939.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants