X Tutup
The Wayback Machine - https://web.archive.org/web/20190417193637/https://github.com/EFForg/https-everywhere/issues/17064
Skip to content
Please note that GitHub no longer supports your web browser.

We recommend upgrading to the latest Google Chrome or Firefox.

Learn more
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow certain 40x responses when testing rulesets #17064

Open
fghzxm opened this Issue Nov 14, 2018 · 1 comment

Comments

Projects
None yet
3 participants
@fghzxm
Copy link
Contributor

fghzxm commented Nov 14, 2018

Type: code issue

The ruleset tester only accepts a target host if an HTTPS request to the host is responded with HTTP 20x. It may be a good idea to accept HTTP 401, 403 and like as well.

For example, websites like demos.igalia.com require HTTP authentication for access. Such hosts are currently rejected by the ruleset tester because they respond with HTTP 401 rather than 20x.

However, in reality users of those websites will submit credentials and be able to browse them. Due to the nature of such websites it is even more important to have proactive HTTPS protection for them than for publicly accessible websites.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
You can’t perform that action at this time.
X Tutup