New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 799218 link

Starred by 3 users

Issue metadata

Status: Duplicate
Merged: issue 466422
Owner: ----
Closed: Jan 2018
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux , Windows , Mac
Pri: 2
Type: Bug
Team-Security-UX



Sign in to add a comment

about:blank is reported as "Not secure" even though it is a local (and therefore secure) browser page

Reported by 93m4qau...@gmail.com, Jan 4 2018

Issue description

UserAgent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36

Steps to reproduce the problem:
1. Open about:blank.
2. Click the verbose chip ("View site information").

What is the expected behavior?
about:blank is reported as secure since it is a local browser page.

What went wrong?
about:blank is reported as "Your connection to this site is not secure". In fact, it is not insecure, and there is no connection to any site.

Did this work before? N/A 

Chrome version: 63.0.3239.132  Channel: stable
OS Version: 6.1 (Windows 7, Windows Server 2008 R2)
Flash Version: 

Irrelevant Comment: Chromium is a glossy, shiny chromium logo, and when you lift it up off of a wood board that it's on, there are a bunch of bugs running around underneath it!
 
Able to reproduce the issue on reported chrome version 63.0.3239.132 and on the latest canary 65.0.3311.3 using windows 10, Ubuntu 14.04 and Mac 10.12.6. As the issue is seen from M50(50.0.2661.0) considering it as non-regression and marking it as Untriaged.

Thanks!
Cc: viswatej...@techmahindra.com sc00335...@techmahindra.com
Components: UI>Browser>Omnibox>SecurityIndicators>VerboseChip
Labels: Triaged-ET M-65 Needs-Triage-M63 OS-Linux OS-Mac
Status: Untriaged (was: Unconfirmed)

Comment 3 by k...@chromium.org, Jan 5 2018

Cc: f...@chromium.org
To felt to see if this is even an issue, and possibly forward to someone who can address it.
Mergedinto: 466422
Status: Duplicate (was: Untriaged)
Thanks for the report. about:blank might or might not be a secure origin depending on the context, but it's not generally a local browser page. See issue 466422 for some discussion about how we should display about:blank in the omnibox and Page Info.
That's more of an abandoned issue as it's been open since March 2015, though it's not unusual to see abandoned issues around here.

Sign in to add a comment