在 HTTPS 中查找 HTTP 包含并抛出安全警告的最简单方法?
我经常需要参与其他人的工作,对短期合同进行修改,而且很多时候我必须处理 IE 中抛出的安全警告,因为某些内容可能包括来自图像、CSS 或其他内容的 HTTP 内容到HTTPS 安全页面。
我只是好奇是否有一个众所周知的程序或服务可以扫描 URL 并返回页面上来自 HTTP 而不是 HTTPS 的确切内容?
我使用fiddler,但由于我自身的不足,我发现该程序有时很困难,并且无法及时将违规内容归零。
真正的专业人士有什么建议吗?
I often have to go into other people's work to make modifications for short-term contracts and a lot of times I have to deal with security warnings throwing in IE because something is including HTTP content from maybe an image, or css or whatever, onto a HTTPS secure page.
I was just curious if there is a well known program or service that will scan a URL and come back with exactly what is coming from HTTP instead of HTTPS on a page?
I use fiddler, but for reasons having to do with my own inadequacies, I find the program difficult at times, and am un-able to zero in on the offending content in a timely manner.
Any advice from the true pros?
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(3)
使用Fiddler:
在
主菜单>中工具> Fiddler 选项
,选项卡HTTPS
,取消选中捕获 HTTPS CONNECTs
。然后,在主菜单>中规则
,选中隐藏 HTTPS CONNECTs
。这样,您在 Fiddler 捕获中看到的唯一内容将是 HTTP 请求和响应(没有 HTTPS 请求或 CONNECT 妨碍)。
Using Fiddler:
In
main menu > Tools > Fiddler options
, tabHTTPS
, uncheckCapture HTTPS CONNECTs
. Then, inmain menu > Rules
, checkHide HTTPS CONNECTs
.This way, the only thing you'll see in your Fiddler capture will be the HTTP requests and responses (without the HTTPS requests or CONNECTs getting in the way).
我会在 Firefox 中加载该页面,并使用 Firebug 的 Net 面板检查该页面加载的所有资源。
I would load up the page in Firefox and use Firebug's Net panel to examine all the resources that the page loads.
据我所知,没有“一成不变”的方法,但我知道的最简单的方法是使用 Opera Dragonfly 或 Chrome 的 Web Inspector 等工具,查看“网络”选项卡并查看资源的加载位置从。有时您可以(取决于您使用的内容)按字母顺序排序,您将清楚地看到
http://
和https://
之间的内容。另外,正如已经提到的,您可以只搜索
http://
的源代码。There's no 'set in stone' way as far as I know, but the easiest way I know of is to either use a tool such as Opera Dragonfly or Chrome's Web Inspector, view the 'Network' tab and see where the resources are being loaded from. You can sometimes (depending on what you use) order this alphabetically and you will clearly see between
http://
andhttps://
.Also as already mentioned, you could just search the source for
http://
.