Skip to content
This repository was archived by the owner on Jul 21, 2025. It is now read-only.

Commit bf8408b

Browse files
lgarronlgarron
committed
mixed-script.badssl.com tweaks.
1 parent e13c530 commit bf8408b

File tree

4 files changed

+28
-24
lines changed

4 files changed

+28
-24
lines changed

‎domains/misc/badssl.com/index.html

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -158,14 +158,14 @@
158158
<a href="https://sha1-2017.badssl.com/" class="bad no-interstitial">sha1-2017</a>
159159
<a href="https://sha1-2016.badssl.com/" class="dubious">sha1-2016</a>
160160
<a href="https://mixed.badssl.com/" class="dubious">mixed</a>
161-
<a href="https://mixed-active.badssl.com/" class="dubious">mixed-active</a>
162161
<a href="https://rc4.badssl.com/" class="neutral">rc4</a>
163162
<a href="https://cbc.badssl.com/" class="neutral">cbc</a>
164163
<a href="" id="reveal-more">More...</a>
165164
<a href="https://sha256.badssl.com/" class="more good">sha256</a>
166165
<a href="https://hsts.badssl.com/" class="more goodish">hsts</a>
167166
<a href="https://preloaded-hsts.badssl.com/" class="more goodish">preloaded-hsts</a>
168167
<a href="https://subdomain.preloaded-hsts.badssl.com/" class="more bad">subdomain.<br>preloaded-hsts</a>
168+
<a href="https://mixed-script.badssl.com/" class="bad no-interstitial">mixed-script</a>
169169
<a href="https://dh480.badssl.com/" class="more bad">dh480</a>
170170
<a href="https://dh512.badssl.com/" class="more bad">dh512</a>
171171
<a href="https://dh1024.badssl.com/" class="more dubious">dh1024</a>

‎domains/misc/mixed-script.badssl.com.conf

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,17 +1,17 @@
11
server {
22
listen 80;
3-
server_name mixed-active.badssl.com;
3+
server_name mixed-script.badssl.com;
44

55
return 301 https://$server_name$request_uri;
66
}
77

88
server {
99
listen 443;
10-
server_name mixed-active.badssl.com;
10+
server_name mixed-script.badssl.com;
1111

1212
include /var/www/badssl/nginx-includes/wildcard.normal.conf;
1313
include /var/www/badssl/nginx-includes/tls-defaults.conf;
1414
include /var/www/badssl/common/common.conf;
1515

16-
root /var/www/badssl/domains/misc/mixed-active.badssl.com;
16+
root /var/www/badssl/domains/misc/mixed-script.badssl.com;
1717
}

‎domains/misc/mixed-script.badssl.com/index.html

Lines changed: 21 additions & 17 deletions
Original file line numberDiff line numberDiff line change
@@ -1,12 +1,12 @@
11
<!doctype html>
22
<html>
33
<head>
4-
<title>mixed.badssl.com</title>
5-
<link rel="shortcut icon" href="/icons/favicon-yellow.ico"/>
6-
<link rel="apple-touch-icon" href="/icons/icon-yellow.png"/>
4+
<title>mixed-script.badssl.com</title>
5+
<link rel="shortcut icon" href="/icons/favicon-red.ico"/>
6+
<link rel="apple-touch-icon" href="/icons/icon-red.png"/>
77
<style>
88
html, body {
9-
background: rgb(246, 207, 47);
9+
background: gray;
1010

1111
margin: 0;
1212
padding: 0;
@@ -26,27 +26,31 @@
2626
text-align: center;
2727
font-family: "Source Code Pro", Monaco, Consolas, "Courier New", monospace, Impact;
2828
font-size: 5em;
29-
font-size: 7vw;
29+
font-size: 9vw;
3030
text-shadow:
3131
0 0 20px rgba(255, 255, 255, 0.5),
3232
0 0 40px rgba(255, 255, 255, 0.5),
3333
0 0 60px rgba(255, 255, 255, 0.5);
3434
}
35-
img {
36-
width: 20vh;
37-
max-width: 256;
38-
margin-top: 5vh;
39-
}
40-
span {
41-
font-size: 50%;
35+
.footer {
36+
background: rgba(0, 0, 0, 0.25);
37+
38+
position: fixed;
39+
width: 80vw;
40+
bottom: 0;
41+
left: 0;
42+
padding: 2vh 10vw;
43+
44+
font-family: Helvetica, Tahoma, sans-serif;
45+
text-align: center;
46+
color: white;
47+
font-size: 3vw;
4248
}
4349
</style>
4450
</head>
4551
<body>
46-
<h1>
47-
mixed-active.badssl.com<br>
48-
<span id="mixed"></span>
49-
</body>
50-
<script src="http://mixed-active.badssl.com/nonsecure.js"></script>
52+
<h1>mixed-script.<br>badssl.com</h1>
53+
<div class="footer" id="footer">This page triggers active mixed content<br>(a script from an insecure URL).</div>
54+
<script src="http://mixed-script.badssl.com/nonsecure.js"></script>
5155
</body>
5256
</html>

‎domains/misc/mixed-script.badssl.com/nonsecure.js

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,8 @@
11
(function() {
22
// Change the background to red
3-
document.querySelector("html").style.backgroundColor = "#f00";
4-
document.querySelector("body").style.backgroundColor = "#f00";
3+
document.querySelector("html").style.backgroundColor = "red";
4+
document.querySelector("body").style.backgroundColor = "red";
55

66
// Write text to the page
7-
document.getElementById("mixed").innerHTML = "[Active mixed content loaded]";
7+
document.getElementById("footer").innerHTML = "This page has run active mixed content<br>(a script from an insecure URL).";
88
})();

0 commit comments

Comments
 (0)