[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #7575 [EFF-HTTPS Everywhere]: WebAssign site produces litany of "Security Warning" alerts

#7575: WebAssign site produces litany of "Security Warning" alerts
----------------------------------+-----------------------------------------
 Reporter:  cypherpunks           |          Owner:  pde
     Type:  defect                |         Status:  new
 Priority:  normal                |      Milestone:     
Component:  EFF-HTTPS Everywhere  |        Version:     
 Keywords:                        |         Parent:     
   Points:                        |   Actualpoints:     
----------------------------------+-----------------------------------------

Comment(by cypherpunks):

 To add a little, the warning is happening due to a giant form on
 webassign.net's site that uses an absolute http URL to POST to that then
 gets converted to https by HTTPS Everywhere. This conversion must take
 place after the Firefox logic that detects posting to a non-https URL from
 an https one.

 Is there a way for HTTPS Everywhere to rewrite the URL before the Firefox
 posting logic sees it in order to rid ourselves of this error?

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/7575#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs