Scan more things for being MC or not?

[bramus]

Full list at http://www.w3.org/TR/mixed-content/#categories

[jamieburchell]

I think this is related to the original question/suggestion here, but I just ran a scan on a website and it "missed" lots of things that were requested over HTTP.

For example, old object/embed code like this:

<object><param name="movie" value="http://www.youtube.com/..."></param><embed src="http://www.youtube.com/..."></embed></object>

Maybe we could have an ability to create our own regex matches?

Possible additional tags to check for:

source[srcset]
video[src]
audio[src]
img[srcset] (can contain multiples)
param[value] (e.g. when used with name="movie")
embed[src]

Of course, none of this considers insecure requests from stylesheets or javascript.

[bramus]

Thanks for your additions via #36, @jamieburchell!