search

felixcatx / google-desktop-sdk

Automatically exported from code.google.com/p/google-desktop-sdk
0 stars 0 forks source link

Attempts to request a script element from a domain with invalid security certificate silently fail #107

Open GoogleCodeExporter opened 8 years ago

GoogleCodeExporter commented 8 years ago 
What steps will reproduce the problem?
1. Set up a HTTPS server with a certificate that has a mismatched domain. 
E.g. server is www.example.com but certificate belongs to localhost.
2. Create a URL gaddget that points at a HTML page on a server with a valid
certificate.
3. Add a script tag to the HTML that references the server with an invalid
certificate.

What is the expected output? What do you see instead?

I'd expect some sort of popup warning or error but I see nothing and the
script element does not load.

What version of the product are you using? On what operating system?

5.8.0809.23506-en-GB-pb on Windows XP SP3

Please provide any additional information below.

In a production environment, the behaviour is just about OK since we expect
to have real certificates but we need to test against externally-provided
test systems that are frequently misconfigured.

Original issue reported on code.google.com by fas...@gmail.com on 28 Jul 2009 at 8:03