RESOLVED FIXED 140793
XHR should be treated as active mixed content 
https://bugs.webkit.org/show_bug.cgi?id=140793
Summary XHR should be treated as active mixed content
Michael Catanzaro
Reported 2015-01-22 15:42:41 PST
XHR should not be permitted to open HTTP URLs when active mixed content is blocked, and should trigger mixed content warnings otherwise.
Attachments
Patch (5.22 KB, patch)
2015-01-22 15:51 PST, Michael Catanzaro 		no flags
DetailsFormatted DiffDiff
Block mixed content XHR (10.46 KB, patch)
2015-01-27 15:28 PST, Michael Catanzaro 		buildbot: commit-queue-
DetailsFormatted DiffDiff
Archive of layout-test-results from ews105 for mac-mavericks-wk2 (770.01 KB, application/zip)
2015-01-27 15:51 PST, Build Bot 		no flags
Details
Archive of layout-test-results from ews101 for mac-mavericks (586.13 KB, application/zip)
2015-01-27 16:25 PST, Build Bot 		no flags
Details
Show Obsolete (1) View All Add attachment proposed patch, testcase, etc.
Michael Catanzaro
Comment 1 2015-01-22 15:51:31 PST
Created attachment 245175 [details] Patch
Michael Catanzaro
Comment 2 2015-01-27 15:28:21 PST
Created attachment 245482 [details] Block mixed content XHR
Build Bot
Comment 3 2015-01-27 15:51:54 PST
Comment on attachment 245482 [details] Block mixed content XHR Attachment 245482 [details] did not pass mac-wk2-ews (mac-wk2): Output: http://webkit-queues.appspot.com/results/4810588546924544 New failing tests: http/tests/security/mixedContent/ssl/insecure-xhr-in-main-frame.html http/tests/security/mixedContent/ssl/insecure-xhr-in-iframe.html
Build Bot
Comment 4 2015-01-27 15:51:56 PST
Created attachment 245488 [details] Archive of layout-test-results from ews105 for mac-mavericks-wk2 The attached test failures were seen while running run-webkit-tests on the mac-wk2-ews. Bot: ews105 Port: mac-mavericks-wk2 Platform: Mac OS X 10.9.5
Build Bot
Comment 5 2015-01-27 16:25:51 PST
Comment on attachment 245482 [details] Block mixed content XHR Attachment 245482 [details] did not pass mac-ews (mac): Output: http://webkit-queues.appspot.com/results/5909659940552704 New failing tests: http/tests/security/mixedContent/ssl/insecure-xhr-in-main-frame.html http/tests/security/mixedContent/ssl/insecure-xhr-in-iframe.html
Build Bot
Comment 6 2015-01-27 16:25:54 PST
Created attachment 245490 [details] Archive of layout-test-results from ews101 for mac-mavericks The attached test failures were seen while running run-webkit-tests on the mac-ews. Bot: ews101 Port: mac-mavericks Platform: Mac OS X 10.9.5
Michael Catanzaro
Comment 7 2015-03-06 15:05:32 PST
This is fixed by bug #142378. Also, I think my changes were not ideal anyway: see bug #140625.
Note You need to log in before you can comment on or make changes to this bug.