[TIMOB-26219] Windows : Implement Ti.UI.WebView.mixedContentMode

GitHub Issue	n/a
Type	New Feature
Priority	Medium
Status	Closed
Resolution	Won't Do
Resolution Date	2018-08-01T00:41:22.000+0000
Affected Version/s	n/a
Fix Version/s	n/a
Components	Windows
Labels	n/a
Reporter	grebulon
Assignee	Kota Iguchi
Created	2018-07-19T23:53:24.000+0000
Updated	2018-08-01T00:41:22.000+0000

Description

Android 5 (21) adds WebSettings.setMixedContentMode to control how mixed content is handled (https that contains inlined http). Need to add access to this. https://developer.android.com/reference/android/webkit/WebSettings#setMixedContentMode(int) Description: Images doesn't load in webview if they are hosted on http server! E.g. if you assign webview url property to https://blogs-dev.vmware.com/vov/authors/ Some images get load properly but some which are hosted on http server or have http://xyz path they are not getting loaded. Test code:

<Alloy>
<Window class="container">
<WebView id="label" url="https://blogs.vmware.com/vov/authors/"></WebView> 
</Window>
</Alloy>

Error Log:

[INFO] : I/TiWebChromeClient.console: (main) [111,16675] Mixed Content: The page at 'https://blogs.vmware.com/vov/authors/#' was loaded over HTTPS, but requested an insecure image 'http://blogs.vmware.com/vov/files/2018/02/boney-francis.jpg'. This request has been blocked; the content must be served over HTTPS. (0:https://blogs.vmware.com/vov/authors/#)
[INFO] : I/TiWebChromeClient.console: (main) [1,16676] Mixed Content: The page at 'https://blogs.vmware.com/vov/authors/#' was loaded over HTTPS, but requested an insecure image 'http://blogs.vmware.com/vov/files/2018/03/Jerry_Griffin.png'. This request has been blocked; the content must be served over HTTPS. (0:https://blogs.vmware.com/vov/authors/#)
[INFO] : I/TiWebChromeClient.console: (main) [0,16676] Mixed Content: The page at 'https://blogs.vmware.com/vov/authors/#' was loaded over HTTPS, but requested an insecure image 'http://blogs.vmware.com/vov/files/2017/11/Bask-Iyer-170x170.jpg'. This request has been blocked; the content must be served over HTTPS. (0:https://blogs.vmware.com/vov/authors/#)
[INFO] : I/TiWebChromeClient.console: (main) [1,16677] Mixed Content: The page at 'https://blogs.vmware.com/vov/authors/#' was loaded over HTTPS, but requested an insecure image 'http://blogs.vmware.com/vov/files/2018/05/ankur.jpg'. This request has been blocked; the content must be served over HTTPS. (0:https://blogs.vmware.com/vov/authors/#)
[INFO] : I/TiWebChromeClient.console: (main) [1,16678] Mixed Content: The page at 'https://blogs.vmware.com/vov/authors/#' was loaded over HTTPS, but requested an insecure image 'http://blogs.vmware.com/vov/files/2018/03/romy-kaura.png'. This request has been blocked; the content must be served over HTTPS. (0:https://blogs.vmware.com/vov/authors/#)

Test Environment:


Android 8.0, Android 6.0
Operating System
  Name                        = Microsoft Windows 10 Pro
  Version                     = 10.0.16299
  Architecture                = 32bit
  # CPUs                      = 4
  Memory                      = 17091956736
Node.js
  Node.js Version             = 8.9.1
  npm Version                 = 5.5.1
Titanium CLI
  CLI Version                 = 5.1.0
Titanium SDK
  SDK Version                 = 7.1.0.GA, 6.3.0.GA

Thanks

Comments

Kota Iguchi 2018-08-01

Closing this as Won't Do for Windows, because Windows WebView component simply does not support any features to enable/disable mixed content. Mixed content on Windows WebView is simply allowed, [MS gets this feature request at least over 2 years ago](https://social.msdn.microsoft.com/Forums/sqlserver/en-US/00fa78a5-02ae-4ac7-8619-9e155e4f0c1a/uwp-missing-security-features-in-windows-10-webview?forum=wpdevelop) but there's no indication Microsoft going forward.

JSON Source