Skip to content
This repository has been archived by the owner. It is now read-only.

Allow scripts doesn't show a security icon #6584

Closed
bbondy opened this issue Jan 8, 2017 · 5 comments
Closed

Allow scripts doesn't show a security icon #6584

bbondy opened this issue Jan 8, 2017 · 5 comments
Labels
bug

Comments

@bbondy
Copy link
Member

@bbondy bbondy commented Jan 8, 2017

The icon changes for both Chrome and Firefox for:
https://very.badssl.com/

because of mixed content.
Also if you allow scripts, it then shows no lock icon at all, I think in that latter case it should show an insecure icon.

@bbondy bbondy added this to the 0.13.0 milestone Jan 8, 2017
@bbondy
Copy link
Member Author

@bbondy bbondy commented Jan 9, 2017

Note that originally this was posted because of a test failing, I'm going to fix the test separately , to use a site that has an sha-1. Also this no longer blocks 0.13.0 so not a big rush for it. Removing milestone.

@bbondy bbondy removed this from the 0.13.0 milestone Jan 9, 2017
@diracdeltas
Copy link
Member

@diracdeltas diracdeltas commented Jan 10, 2017

i think it shows an insecure icon in chrome because of passive mixed content (images), so this is really the same ticket as #2168

@diracdeltas
Copy link
Member

@diracdeltas diracdeltas commented Jan 10, 2017

Also if you allow scripts, it then shows no lock icon at all, I think in that latter case it should show an insecure icon.

that does seem to be a regression. cc @darkdh

@bbondy bbondy changed the title very.badssl.com shows secure icon Allow scripts doesn't show a security con Jan 11, 2017
@bbondy bbondy changed the title Allow scripts doesn't show a security con Allow scripts doesn't show a security icon Jan 11, 2017
@luixxiul
Copy link
Contributor

@luixxiul luixxiul commented May 28, 2017

The issue seems to have been fixed somewhere.

@luixxiul
Copy link
Contributor

@luixxiul luixxiul commented Sep 9, 2017

It has been fixed.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Linked pull requests

Successfully merging a pull request may close this issue.

None yet
3 participants
You can’t perform that action at this time.