Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

non-secure referrer test fails in Chromium due to autoupgraded mixed content #2

Open
pes10k opened this issue Nov 1, 2021 · 0 comments

Comments

@pes10k
Copy link

pes10k commented Nov 1, 2021

Similar to #1, the test for should not be sent over non-secure request if the referring page was transferred with a secure protocol incorrectly reports a error in Chromium browsers bc mixed-content requests are autoupgraded, causing the referrer to be sent.

Test doesn't anticipate the auto-upgrade, and so expects no referrer. Correct behavior I think would be to check if the request was sent HTTPS or HTTP, and expect a referrer or none, respectively.

Was reported to Brave here brave/brave-browser#18576

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant