bjohn465 / bypass Goto Github PK

A favicon would make it easier to find the tab for bypass.

When https://bjohn465.github.io/bypass/ is used to access the "app," it won't work (at least, in Chrome 44).

The following warning appears in the developer tools console:

Mixed Content: The page at 'https://bjohn465.github.io/bypass/#{someDomain}' was loaded over HTTPS, but requested an insecure resource 'http://{someDomain}/'. This request has been blocked; the content must be served over HTTPS.

In other words, the domain is loaded in an <iframe> using HTTP, but the containing page (i.e. the bypass "app") was loaded over HTTPS. In this case, Chrome blocks the page from loading in the <iframe>, so the bypass never happens.

The (somewhat) good news is that Sophos won't show the "questionable website" warning on HTTPS sites, as far as I can tell. That's why all the domains are bypassed using HTTP instead of HTTPS.

I was thinking of displaying a warning if bypass is accessed using HTTPS, unless I can figure out a way to make it work over HTTPS.