MicrosoftEdge / MicrosoftEdge/WebView2Feedback
Provide API to access security state of page to display secure/insecure address bar icon
Nobody has claimed this yet.
- Dominant language
- PowerShell
- Stars
- 526
- Forks
- 67
- PR merge metrics
- No merged PRs in 30d
Description
Internally Chromium has a security_state::GetSecurityLevel() method that provides a state to display in address bar indicating state of page: secure(https), insecure(http or legacy TLS version), dangerous (active mixed content etc)
Although you could roll your own it's a lot of work and keeping it functionally identical to Chrome/Edge would be ongoing work.
It would be very useful if this was exposed somewhere. A property returning an enum equivalent to SecurityLevel is probably good enough (might need to be an interface if anyone needs a human readable description of why a security level has been chosen).
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reviewing Chromium's security_state::GetSecurityLevel() and the WebView2 API surface to determine where an equivalent property could fit. Check the linked Azure work item for current context. Done means callers can access a security-level enum matching the page state used for the address bar.
Written by the indexing model from the issue text.
Assessment
- Domain
- api, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100