http-nowhere icon indicating copy to clipboard operation
http-nowhere copied to clipboard

Allowed HTTP URL assets getting blocked and/or not redirected.

Open karlwilbur opened this issue 10 years ago • 1 comments

I have allowed "*.local:80/" for development. Works as expected. However, the assets (images, external JS, and external CSS) are not being redirected to HTTPS endpoints.

Link, script, and img elements (more specifically their href/src attributes) have no protocol defined ( i.e. "//example.com" vs "http://example.com") so they should be fetched using the same protocol as the parent window, in this case HTTP. I would expect that the extension detects those request and auto-redirects (Auto-Redirect is selected in preferences). However, in the Firebug Net tab, I see asset requests that never complete ...even to the allowed domain.

http://netdna.bootstrapcdn.com/bootstrap/3.1.0/css/bootstrap.min.css http://cdnjs.cloudflare.com/ajax/libs/handlebars.js/1.3.0/handlebars.min.js http://my.devapp.local/css/style.css

karlwilbur avatar Mar 12 '14 22:03 karlwilbur

After re-reading the README, I see that I need to add "*" to the path to serve local assets. That part is working now.

karlwilbur avatar Mar 12 '14 22:03 karlwilbur