YouTube, Google Search, Google+, and Google Maps apps link to HTTP
Reported by
93m4qau...@gmail.com,
Feb 6 2018
|
|||
Issue descriptionChrome version: 66.0.3340.0 canary The preinstalled YouTube, Google Search, Google+, and Google Maps apps on chrome://apps link to HTTP (which then redirects to HTTPS), but should start out as HTTPS.
,
Feb 6 2018
I don't see pre-installed Google Search, Google+, and Google Maps apps. Could those be a remnant in your profile from when they were (were they ever pre-installed? I don't remember) or from installing them? The pre-installed YouTube app does appear to have the wrong link though. HSTS should smooth this over, but agreed that should be fixed. +asargent (OWNERS file) and Platform>Apps>Default folks. (Is asargent still working on this stuff? Should we update the OWNERS file?
,
Feb 10 2018
I don't see the Google Search, Google+, and Google Maps apps upon creating a clean profile. However, I still see the YouTube app, which initially goes to HTTP when you click on its icon.
,
Feb 10 2018
The YouTube manifest.json file does indeed use non-secure "http://www.youtube.com" links. Fortunately, youtube.com is on the HSTS preload list.
,
May 15 2018
|
|||
►
Sign in to add a comment |
|||
Comment 1 by krajshree@chromium.org
, Feb 6 2018