foudfou / skipCertError

Cert Error Bypass for Firefox 4+
https://addons.mozilla.org/fr/firefox/addon/skip-cert-error/
15 stars 8 forks source link

No exception for page element. (iframe bypass) #3

Open Seanster opened 12 years ago

Seanster commented 12 years ago

I saw this discussed elsewhere. Here's a sample url where the problem certificate is inside a frame. Firefox (16.0.1) presents the "This Connection is Untrusted" garbage in the frame and there's no "I Understand the risks" bypass.

browser.xul.error_pages.expert_bad_cert;true This setting is ignored. No bypass appears.

http://www.sheridancollege.ca/Services/Student%20Support%20Services/Career%20Centre/Hire%20a%20Student%20or%20Graduate/Post%20a%20Job/Post%20a%20job%20right%20now.aspx

When I opened the frame into a new tab the addon worked as expected.

foudfou commented 12 years ago

Hi, I've been trying several approaches, but I don't think this is feasible with SkipCertError's current implementation, which uses a TabsProgressListener. There are 2 challenges here:

I'm afraid I won't be able to work further on that soon.

A possible approach might be to re-implement this addon with a proxy that would do the validation before Firefox, ala Convergence.