Skip to content
This repository has been archived by the owner on Nov 3, 2020. It is now read-only.

No exception for page element. (iframe bypass) #3

Open
Seanster opened this issue Oct 24, 2012 · 1 comment
Open

No exception for page element. (iframe bypass) #3

Seanster opened this issue Oct 24, 2012 · 1 comment
Labels

Comments

@Seanster
Copy link

I saw this discussed elsewhere. Here's a sample url where the problem certificate is inside a frame. Firefox (16.0.1) presents the "This Connection is Untrusted" garbage in the frame and there's no "I Understand the risks" bypass.

browser.xul.error_pages.expert_bad_cert;true
This setting is ignored. No bypass appears.

http://www.sheridancollege.ca/Services/Student%20Support%20Services/Career%20Centre/Hire%20a%20Student%20or%20Graduate/Post%20a%20Job/Post%20a%20job%20right%20now.aspx

When I opened the frame into a new tab the addon worked as expected.

@foudfou
Copy link
Owner

foudfou commented Nov 4, 2012

Hi, I've been trying several approaches, but I don't think this is feasible with SkipCertError's current implementation, which uses a TabsProgressListener.
There are 2 challenges here:

  • identify requests by documents (including i/frames)
  • listen to failed requests in i/frames

I'm afraid I won't be able to work further on that soon.

A possible approach might be to re-implement this addon with a proxy that would do the validation before Firefox, ala Convergence.

@foudfou foudfou mentioned this issue Sep 30, 2013
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
Projects
None yet
Development

No branches or pull requests

2 participants