Issue metadata
Sign in to add a comment
|
Feature request: Indicate upgraded resources in security panel
Reported by
tollm...@gmail.com,
May 25 2016
|
||||||||||||||||||||||
Issue descriptionUserAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2747.0 Safari/537.36 Steps to reproduce the problem: This is a feature request, so apologies for not following the "steps to reproduce" procedure. The Security panel in Developer Tools is useful for identifying insecure domains used on secure pages; however, when using `upgrade-insecure-requests` and/or `strict-transport-security` Chrome may automatically upgrade requests to secure variants. While this is a good thing, it can lead a developer to think that all resources on a page are loaded securely when they actually aren't. I would like to see the security panel indicator origins that have been upgraded so that it is clear to the developer that the HTML/JS/CSS in the page attempted to load an insecure request, but the browser upgraded it. Perhaps this could be accomplished with another category, "Upgraded Origins". This category would list any origin that was upgraded via the browser even if it is listed in one of the other categories (because one origin could be used in multiple ways on one page). What is the expected behavior? N/A What went wrong? N/A Did this work before? N/A Chrome version: 53.0.2747.0 Channel: canary OS Version: OS X 10.11.4 Flash Version: Shockwave Flash 22.0 r0
,
May 25 2016
,
Aug 6 2016
,
Aug 25 2016
,
Nov 10 2017
,
Dec 1 2017
,
Feb 18 2018
,
Jan 8
Closing due to lack of action/resources. This would be a nice feature but developers can get this information with a report-only CSP policy as well. |
|||||||||||||||||||||||
►
Sign in to add a comment |
|||||||||||||||||||||||
Comment 1 by eostroukhov@chromium.org
, May 25 2016Owner: caseq@chromium.org
Status: Assigned (was: Unconfirmed)