New issue
Advanced search Search tips
Note: Color blocks (like █ or █) mean that a user may not be available. Tooltip shows the reason.

Issue 746236 link

Starred by 2 users
Status: WontFix
Owner: ----
Closed: Aug 2017
Cc:
ajha@chromium.org
█ sandeepkumars@chromium.org
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux , Windows , Mac
Pri: 2
Type: Bug



Sign in to add a comment

Using accesskey with href triggers "unauthenticated sources" warning

Reported by thomasmo...@gmail.com, Jul 19 2017 
UserAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.115 Safari/537.36

Steps to reproduce the problem:
1. Add an acceskey attribute to any link (<a href=""></a>)
2. Try to trigger the acceskey

Example page with description: https://stackoverflow.com/questions/44411638/using-accesskey-in-chrome-triggers-an-unauthenticated-sources-warning

What is the expected behavior?
To open the linked page

What went wrong?
It triggers a warning that normal users won't accept because they don't see the warning.

Did this work before? N/A 

Does this work in other browsers? N/A

Chrome version: 59.0.3071.115  Channel: stable
OS Version: 10.0
Flash Version:

Comment 1 by sandeepkumars@chromium.org, Jul 24 2017

Labels: Needs-Feedback
@thomasmoors: Thanks for the report!!

Could you please provide us a sample test file to check the issue from our end?

Thanks!!
Project Member

Comment 3 by sheriffbot@chromium.org, Jul 24 2017

Cc: sandeepkumars@chromium.org
Labels: -Needs-Feedback
Thank you for providing more feedback. Adding requester "sandeepkumars@chromium.org" to the cc list and removing "Needs-Feedback" label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Comment 5 by ranjitkan@chromium.org, Jul 26 2017

Labels: Needs-Milestone

Comment 6 by ajha@chromium.org, Jul 27 2017

Cc: ajha@chromium.org
Components: Blink>SecurityFeature
Labels: -Needs-Milestone M-62 OS-Linux OS-Mac
Status: Untriaged (was: Unconfirmed)
Able to reproduce the issue on the latest canary(62.0.3168.0) of Windows-10, Mac OS 10.12.5 and Linux Ubuntu 14.04. This is non-regressed behavior and is seen on older chrome version: 45.0.2454.101 as well.

Marking this Untriaged for more inputs.

Comment 7 by mkwst@chromium.org, Aug 1 2017

Status: WontFix (was: Untriaged)
This doesn't look like an `accesskey` problem, it looks like `https://www.w3schools.com/html` redirects to `http://www.w3schools.com/html/` (HTTP, not HTTPS, with a trailing `/`), which is blocked as mixed content. Replacing `https://www.w3schools.com/html` with `https://example.com` (which does not redirect insecurely) does not produce the same error.

Comment 8 by thomasmo...@gmail.com, Aug 1 2017 

Yes that seems correct. I'm sorry for wasting your time for this.
►

Sign in to add a comment