ubuntu-webapps-bugs team mailing list archive
-
ubuntu-webapps-bugs team
-
Mailing list archive
-
Message #00406
[Bug 1306615] Re: URL bar doesn't seem to update when a http navigation is upgraded to https due to HSTS
Looks like the issue is in webbrowser-app indeed. I’ve instrumented the
WebView to monitor changes to the 'url' property, and it’s correctly
updated to https, whereas the address bar isn’t updated.
** Changed in: webbrowser-app
Status: New => Confirmed
** Changed in: webbrowser-app
Assignee: (unassigned) => Olivier Tilloy (osomon)
** Changed in: oxide
Status: New => Invalid
--
You received this bug notification because you are a member of Ubuntu
WebApps bug tracking, which is subscribed to webbrowser-app.
https://bugs.launchpad.net/bugs/1306615
Title:
URL bar doesn't seem to update when a http navigation is upgraded to
https due to HSTS
Status in Oxide Webview:
Invalid
Status in Web Browser App:
Confirmed
Bug description:
I ran webbrowser-app on the desktop, and did the following:
1) From the startpage, I typed "http://www.twitter.com/" in the URL bar
2) Twitter loads, and the URL bar updates to "https://twitter.com/" because Twitter uses HSTS and Oxide ships with Twitter hardcoded in the transport security list.
3) I retype "http://www.twitter.com/" in the URL bar whilst already viewing Twitter.
4) The page reloads, but the URL bar doesn't seem to update correctly this time (it displays "http://twitter.com").
I'm not sure yet if this is an Oxide bug or webbrowser-app bug - I
didn't see any non-SSL traffic to Twitter in Wireshark when doing the
second navigation
To manage notifications about this bug go to:
https://bugs.launchpad.net/oxide/+bug/1306615/+subscriptions
References