Skip to content
This repository has been archived by the owner on Dec 11, 2019. It is now read-only.

fa-search icon should not be displayed while loading unsafe scripts #7191

Closed
luixxiul opened this issue Feb 11, 2017 · 3 comments
Closed

fa-search icon should not be displayed while loading unsafe scripts #7191

luixxiul opened this issue Feb 11, 2017 · 3 comments

Comments

@luixxiul
Copy link
Contributor

luixxiul commented Feb 11, 2017

Describe the issue you encountered: fa-search should not be displayed while loading unsafe scripts

  • Platform (Win7, 8, 10? macOS? Linux distro?): Windows 10 32 bit

  • Brave Version (revision SHA): 0.13.3 RC1

  • Steps to reproduce:

    1. Open https://mixed-script.badssl.com
    2. Click the lock icon
    3. Select "Load Unsafe Scripts"
  • Actual result: The fa-search icon is displayed and soon it is replaced with the unlock icon

  • Expected result: There could be two results

  1. the fa-lock icon should be replaced as soon as scripts are loaded and executed (before onload is fired)
  2. the fa-lock icon should be replaced after all of the scripts are loaded and executed

In my humble opinion the 1st one is better because attacker could intentionaly slow down downloading the other resources . CC @diracdeltas

Otherwise we could simply replace the icon when the buttons are pushed.

  • Extra QA steps:
    1.
    2.
    3.

  • Screenshot if needed:
    fa-search

  • Any related issues:

@bsclifton
Copy link
Member

Similar issue: #5490

@bbondy bbondy modified the milestones: 0.13.5, 0.13.6 Feb 15, 2017
@srirambv
Copy link
Collaborator

It no longer shows fa-search icon when load unsafe script is clicked. Could this be closed?

@luixxiul
Copy link
Contributor Author

Yes the issue has been fixed already, closing.

@luixxiul luixxiul added this to the Backlog milestone May 11, 2017
@luixxiul luixxiul removed this from the Backlog milestone Sep 18, 2017
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

4 participants