New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 918847 link

Starred by 2 users

Issue metadata

Status: Fixed
Owner:
User never visited
Closed: Jan 4
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Android
Pri: 1
Type: Bug-Regression
Team-Security-UX



Sign in to add a comment

Empty space/no icon for pages displayed with partial "https"

Project Member Reported by mar...@mwiacek.com, Jan 3

Issue description

Device name: s7, pixel

From "Settings > About Chrome"
Application version:73.0.3659.0
Operating system:8.0,9.0

URLs (if applicable):fantastyka.pl

Steps to reproduce:
(1)open any url which is only partially encrypted

Expected result:
I don't have specs under hand, but this version PROBABLY should already mark partially secured pages as insecure (for confirming, if I'm wrong expected result is moving URL to the left).

Actual result:
empty space instead of security icon

 
Screenshot_20190103-121949_Chrome.jpg
1.7 MB View Download
Screenshot_20190103-121944_Chrome Canary.jpg
1.7 MB View Download
Issue 918888 has been merged into this issue.
Labels: Needs-triage-Mobile
Cc: jbanavatu@chromium.org ender@google.com chelamcherla@chromium.org
Labels: hasbisect-per-revision RegressedIn-73 Target-73 M-73 Triaged-Mobile FoundIn-73
Owner: ender@chromium.org
Status: Assigned (was: Unconfirmed)
Tested the issue in Android and able to reproduce the issue. 

Steps Followed:
1. Launch Chrome.
2. Visit fantastyka.pl
3. Observed empty space instead of security icon

Chrome versions tested:
73.0.3660.2, 73.0.3659.0

OS:
Android 9.0

Android Devices:
Pixel 2 XL, Pixel XL

Using the per-revision bisect providing the bisect results,
Good Build - 73.0.3654.0
Bad Build - 73.0.3655.0

You are looking for a change made after 619164(GOOD), but before 619165(BAD).

CHANGELOG URL:
https://chromium.googlesource.com/chromium/src/+/30724e1c1da8a1a66bd5f105f6544a1382a83d19

@ender:  Could you please look into the issue, pardon me if it has nothing to do with your changes and if possible please assign it to owner concerned.

Thanks!
Status: WontFix (was: Assigned)
Thanks for filing this! This looks like something that could be triggered by my change.

I double checked the site. It looks like despite site using https protocol initially, is not considered secure by any other variant of Chrome. I also launched stable version of Chrome on desktop and my personal mobile devices, and padlock icon is not shown there, either (note, these version do not include any of my changes); I see on every single device that padlock appears briefly when connection is initiated and before site fully loads, and then disappears, which suggests something on the site is reducing security level (i'm guessing it's because of the plain http:// forms, embedded links and scripts).

if you think this is an error, we may have to address this at a higher level; by far every Chrome version (desktop, ios, android (stable and dev)) behave the same way, so I believe this is actually a problem with the site.

Feel free to reopen this if you believe this is indeed a bug. I'll check where to forward it to, then. Meanwhile - closing as "Working as Intended".
IOS.png
46.9 KB View Download
Desktop.png
6.2 KB View Download
Android Stable.png
15.8 KB View Download
PS. The fix for space at the beginning of URL has just been submitted. Just spotted you raised this as an issue, too.
Status: Assigned (was: WontFix)
Expected results - I was not sure (and explained it)

Bug status - it should be definitely not changed to Won't fix (it suggests, that bug was invalid which is wrong)

Could you also let us know CL link?
I will also clarify my previous comment - I was not sure, how partial https should be marked in these Canary builds (but showing free space was definitely wrong)

I assume, that url will be totally moved to left.

Please attach CL and we could close it as fixed.
Status: Fixed (was: Assigned)
Good point; I addressed the disappearing 'padlock', but not the empty space.

https://crrev.com/c/1393888

Sign in to add a comment