New issue
Advanced search Search tips

Issue 794337 link

Starred by 1 user

Issue metadata

Status: WontFix
Owner: ----
Closed: Dec 2017
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux , Windows , Mac
Pri: 2
Type: Bug
Team-Security-UX



Sign in to add a comment

in product help for insecure scripts points to a page about malware

Project Member Reported by wfh@chromium.org, Dec 12 2017

Issue description

Chrome Version: 65.0.3291.2 (Official Build) canary (64-bit) (cohort: 64-Bit)
OS: Win 10

What steps will reproduce the problem?
(1) Visit a page with insecure scripts e.g. https://mixed-script.badssl.com/
(2) Click on the little padlock in the top right of the URL bar
(3) Click the ? (learn more) link

What is the expected result?

Tells me about insecure scripts and mixed content

What happens instead?

Tells me about malware and phishing sites.

Please use labels and text to provide additional information.


For graphics-related bugs, please copy/paste the contents of the about:gpu
page at the end of this report.

 

Comment 1 by wfh@chromium.org, Dec 12 2017

Cc: est...@chromium.org
Components: UI>Browser>Permissions>Indicators
maybe UI>Browser>Permissions>Indicators is the right component, I'm not sure.

Comment 2 by raymes@chromium.org, Dec 12 2017

Cc: emilyschechter@chromium.org
Components: UI>Browser>Omnibox>SecurityIndicators
It looks like this has been the link for a long time.. You're right though that it doesn't seem to address that UX very well.

For some reason I thought we were getting rid of Learn More links. estark - any thoughts on what to do here?
We're replacing "Learn more" with "(?)", but not getting rid of them, at least product-wide (I don't know about individual specific cases).

Comment 4 by est...@chromium.org, Dec 14 2017

Status: WontFix (was: Untriaged)
I filed an internal bug to have the link point to the part of the page that's relevant (the part starting with "When you visit a deceptive site, Chrome will try to remove the unsafe content...") and to change "deceptive" to "unsafe".

I think that should be sufficient for this bug, especially considering almost no one uses the mixed content shield and it's probably going to get killed at some point. I'll reopen this if we can't update where on the page the link points to.

Sign in to add a comment