Cannot select "visit website" link when visiting local dev certificate websites
-
When visiting a locally (network) hosted website using a secure connection (HTTPS) and Minim is set to block JS, the Safari page doesn't allow the user to click the necessary "I understand the risks and want to visit this website" link. The user has to temporarily disable Minim in order to accept the Safari warning and then re-enable it.
Could there be an exception made for Safari's own pages?
Currently there's no way for the user to add such an exception as the URL bar is empty (internal Safari page?).
[Info] Content blocker prevented frame displaying safari-web-extension://43EBD46F-E430-4642-88EA-8F0344484E50/dist/entry-page.html from loading a resource from safari-web-extension://43EBD46F-E430-4642-88EA-8F0344484E50/dist/assets/page-cab3406c.js
^^^ safari-web-extension pages cannot be added to Minim through the UI.
Also, extensions like Userscripts (GitHub) won't work since they display a page that is also Safari internal and require Minim to be disable for the user to edit/create new css/script files .
-
-
Hmm, doesn't seem to be working yet.
Just to be sure I understood, the expected behavior is for Minim to not block (internal whitelist) the "safari-resources" and "safari-web-extensions" pages, right?
I tested it with the default settings of JS blocked in Minim, both for 1st and 3rd party. Obviously, if I disable it it works...but I cannot set an exception for these pages manually as the "+" button won't work with these pages since the URL is hidden in the bar. -
Yeah I added an internal whitelist for “safari-resources" and "safari-web-extensions” but I guess it didn’t work…
How exactly can I test this
You are accessing a particular page for a Safari extension, is that right?I’ll have another look at this when I’m home later and see what else is possible.
-
@SweetP 1. For the safari-web-extensions page I use a open source app from the store called Userscripts. Once installed the safari extension has a “open extension settings” link that once clicked goes to the editor for userscripts. This editor doesn’t load properly as JS is blocked in Minim.
- For the safari-resource page, any website that doesn’t have a valid certificate would trigger that page—I use a local dev server or my local router’s https page that is signed with a local certificate.