artemave / translate_onhover

Browser translation extension
https://chrome.google.com/webstore/detail/aggiiclaiamajehmlfpkjmlbadmkledi
205 stars 61 forks source link

Non secure origins warning in Chrome DevTools #38

Open mayinx opened 6 years ago

mayinx commented 6 years ago

Hey guys (great extension by the way!)

Nothing serious, just a minor warning that's a bit annoying:

When checking the "Security"-tab/-panel in Chrome DevTools, your chrome-extension produces a "non-secure origin"-warning (concerning https/ssl)

Origin
chrome-extension://aggiiclaiamajehmlfpkjmlbadmkledi
Not secure
Your connection to this origin is not secure.

Cheers, Mayinx

artemave commented 6 years ago

Thanks! Glad you like it.

What should we change to remove the warning?

mayinx commented 6 years ago

I'm no expert when it comes to chrome extensions - but my wild guess is, one or more elements of the extension try to communicate over a non secure (i. e. http instead of https) connection with resources on the web - e.g to fetch / include required assets like js- / css-files or images etc. - so to fix this, you would have to make sure that all assets of the extension are loaded via https instead of http - but again, I'm just guessing here without any deeper knowledge about the construction of chrome extensions ...

mayinx commented 6 years ago

I checked the ChromeDev's "Network"-Panel - seems like the warning is related to one (or all) of the following resources from the extensions lib-folder:

chrome-extension://aggiiclaiamajehmlfpkjmlbadmkledi/lib/popup.js
chrome-extension://aggiiclaiamajehmlfpkjmlbadmkledi/lib/tat_popup.js
chrome-extension://aggiiclaiamajehmlfpkjmlbadmkledi/lib/popup.html
chrome-extension://aggiiclaiamajehmlfpkjmlbadmkledi/lib/tat_popup.html

Hope that helps...