https-everywhere icon indicating copy to clipboard operation
https-everywhere copied to clipboard
verified publisher icon EFForg

Use `platform="mixedcontent"` rulesets when EASE is enabled

Open Bisaloo opened this issue 6 years ago • 2 comments

Type: feature request

It would be useful to use the platform="mixedcontent" rulesets with EASE to increase the number of functional websites.

You can test this by visiting http://legorafi.fr (with EASE enabled) even when there is a rule (with platform="mixedcontent") that should handle this case:

https://github.com/EFForg/https-everywhere/blob/3336050dce0da5a84b196b8dcf7171ae2e8b73cf/src/chrome/content/rules/LeGorafi.fr.xml#L13-L14

Because EASE also sends the upgrade-insecure-requests header, platform="mixedcontent" rulesets should not cause any issues in most cases.

Bisaloo avatar Jul 04 '19 14:07 Bisaloo

Nice one! I also noticed EASE can fix mixed content issues. Can we also do the opposite and allow some rulesets to attempt such fix even if user does not have EASE on?

pipboy96 avatar Jul 05 '19 02:07 pipboy96

I think we can also bypass MCB even if further redirects are required by using upgrade-insecure-requests and then doing https => https redirect.

pipboy96 avatar Jul 05 '19 12:07 pipboy96