New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
fix(service-worker): ignore passive mixed content requests #25994
Conversation
You can preview ab01ebc at https://pr25994-ab01ebc.ngbuilds.io/. |
ea58b3b
to
ba751f0
Compare
You can preview ba751f0 at https://pr25994-ba751f0.ngbuilds.io/. |
ba751f0
to
805c538
Compare
You can preview 805c538 at https://pr25994-805c538.ngbuilds.io/. |
805c538
to
b8ced23
Compare
You can preview b8ced23 at https://pr25994-b8ced23.ngbuilds.io/. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
thanks for great commit message!
this PR needs a rebase to drop the pull approve pending check - otherwise lgtm |
merge-assistance: please rebase before merging and verify that the CI is still green, if not please ask @gkalpak to help |
Although [passive mixed content][1] requests (like images) only produce a warning without a ServiceWorker, fetching it via a ServiceWorker results in an error. See angular#23012 (comment) for more details. This commit makes the ServiceWorker ignore such requests and let them be handled by the browser directly to avoid breaking apps that would work without the ServiceWorker. [1]: https://developers.google.com/web/fundamentals/security/prevent-mixed-content/what-is-mixed-content#passive_mixed_content Fixes angular#23012
b8ced23
to
cc6da57
Compare
@gkalpak I've rebased this PR on top of the latest master. Could you please have a quick look at the changes to see if everything looks good and put the "merge" label back? Thank you. |
@AndrewKushnir, looks good. Thx! |
Although [passive mixed content][1] requests (like images) only produce a warning without a ServiceWorker, fetching it via a ServiceWorker results in an error. See #23012 (comment) for more details. This commit makes the ServiceWorker ignore such requests and let them be handled by the browser directly to avoid breaking apps that would work without the ServiceWorker. [1]: https://developers.google.com/web/fundamentals/security/prevent-mixed-content/what-is-mixed-content#passive_mixed_content Fixes #23012 PR Close #25994
This issue has been automatically locked due to inactivity. Read more about our automatic conversation locking policy. This action has been performed automatically by a bot. |
PR Checklist
Docs have been added / updated (for bug fixes / features)PR Type
What is the current behavior?
Passive mixed content requests (like images) result in an error. This is a ServiceWorker limitation. Without the ServiceWorker, such requests only produce a warning. See #23012 (comment) for more details.
Issue Number: #23012
What is the new behavior?
The ServiceWorker will ignore such requests and let them be handled by the browser directly.
Does this PR introduce a breaking change?
Other information
Fixes #23012.