[Webkit-unassigned] [Bug 24696] Enable mixed content detection

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=24696


abarth at webkit.org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
  Attachment #28749|0                           |1
        is obsolete|                            |
  Attachment #30522|                            |review?
               Flag|                            |




------- Comment #5 from abarth at webkit.org  2009-05-20 23:06 PDT -------
Created an attachment (id=30522)
 --> (https://bugs.webkit.org/attachment.cgi?id=30522&action=view)
patch v2

Here is a second attempt.  ap and I discussed this patch on #webkit.  He
thought it might be better to use the willSendRequest to do the mixed content
check on the theory that the client should be making these policy decisions. 
fishd thought this approach was better because checking the mixed content
policy in willSendRequest adds a synchronous IPC message to the browser process
in chromium, which affects performance.

There seems to be some amount of precedence for adding security context
information to ResourceRequests.  For example, we already have the
mainDocumentURL (which is actually very quirky).


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.