Opened 4 years ago

Closed 3 years ago

#15490 closed defect (fixed)

Google Videos ruleset causes 404s on Google Images with HTTPS Everywhere 2015.3.23

Reported by: cypherpunks Owned by:
Priority: Medium Milestone:
Component: HTTPS Everywhere/HTTPS Everywhere: Chrome Version:
Severity: Normal Keywords: httpse-ruleset-bug google images videos https everywhere 404 chrome
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

Upon visiting a Google Images search result page and middle-clicking an image directly, without expanding the result first, the target URL that is opened in a new tab appears to be rewritten to a nonexistent URL, causing Google to serve a 404 in response (as expected).

This happened when disabling all browser extensions except for HTTPS Everywhere 2015.3.23.

This happened when disabling all active rulesets on the page except for Google Videos.

This could not be verified when enabling all active rulesets on the page except for Google Videos.

I have JavaScript enabled in Chrome version 41.0.2272.101 on Linux (32-bit).

The Google Videos ruleset may be obsolete, as YouTube has a distinct ruleset. It is possible that the only use case for it left is to have Google redirect users from videos.google.com/* to www.google.com/* more securely over HTTPS, without connecting over HTTP first. If so, a suggested fix would be to remove the ruleset entirely if this is already covered by another ruleset, given that there are so many for Google. For security reasons, I did not verify this possible redundancy myself.

Quick test URL with funny picture as a bonus:

https://encrypted.google.com/search?tbm=isch&q=%22pets+in+offices+share+your+photos+and%22+guardian

Child Tickets

Change History (2)

comment:1 Changed 4 years ago by cypherpunks

Keywords: httpse-ruleset-bug added

comment:2 Changed 3 years ago by legind

Resolution: fixed
Severity: Normal
Status: newclosed

This is no longer occurring since Google Video has been disabled by default.

Note: See TracTickets for help on using tickets.