All geek questions in one place

How to optimize a chrome trick without a hint for downloading unsafe content

In one of the latest chrome updates, the chrome team added the message “load anyway”, which suggests that the user approves the loading of untrusted content onto secure pages, somehow optimistically found a way to “trick” the chrome so as not to ask a question about it and just download content with a yellow warning key, for example: https://www.optimizely.com/edit#url=http://www.yahoo.com/

I can’t understand how they did it ... does anyone understand?

thanks

+6
source share
2 answers

Looks like they do it after the page loads. The home page served only harmless <iframe></iframe> - not yet uploaded insecure content. Javascript does the actual loading of the iframe .

I did some testing and I can not get the message on Chromium 18 (Linux). However, on my test page, the security icon turns green when the page loads, and then turns yellow when insecure content loads in the iframe . The same thing happens on Optimization. Therefore, it’s best to assume that this method avoids the “Download anyway” message, allowing you to download insecure content.

Do not count on this - if this is a new Chrome feature, most likely they will also understand this trick and fix it later .;)

+4
source

They do not seem to be able to do in Chrome: They ask the user to enable it according to this screenshot: enter image description here

+2
source

Source: https://habr.com/ru/post/922233/

More articles:


All Articles