Developer Tools Audit - about:blank marked as insecure URL
Reported by
dejan.vi...@gmail.com,
Feb 9 2018
|
|||||||
Issue descriptionChrome Version : 62.0.3202.89 OS Version: Ubuntu 16.04.3 LTS (xenial) What steps will reproduce the problem? 1. Open a page, which contains a URL source, which is "about:blank". 2. Open Google Chrome dev-tools "Audits". 3. Run Audit on the page, which contains a URL source, which is "about:blank" 4. "about:blank" will be marked as a insecure URL. What is the expected result? -> "about:blank" is not listed as a insecure URL. What happens instead of that? -> "about:blank" is listed as a insecure URL. UserAgentString: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.89 Safari/537.36
,
Feb 19 2018
,
Feb 20 2018
Reporter@ - Thanks for filing the issue...!! Could you please provide a sample url which contains a URL source, which is "about:blank" to test the issue from TE-end. This will help us in triaging the issue further. Thanks...!!
,
Feb 20 2018
@krajshree - Thanks for Your answer! For example, if You run a "Best Practices" Audit on "https://www.gmx.net/" (mobile emulated). I've added You the downloaded JSON of a performed Best Practices Audit. Thanks so far! Cheers Dejan
,
Feb 20 2018
Thank you for providing more feedback. Adding the requester to the cc list. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
,
Feb 26 2018
Contexts that inherit a security context (about:, javascript:) should probably be exempted from the audit.
,
Mar 12 2018
,
Mar 12 2018
Yeah good call, thanks for flagging this dejan.vintonjiv!
,
Mar 12 2018
No problem, I'm glad, I could help :-)
,
Oct 31
|
|||||||
►
Sign in to add a comment |
|||||||
Comment 1 by krajshree@chromium.org
, Feb 11 2018