Security Domain
Security
Methods
- Security.disable
- Security.enable
- Security.setIgnoreCertificateErrors
- Security.handleCertificateError Deprecated
- Security.setOverrideCertificateErrors Deprecated
Events
- Security.certificateError Deprecated
- Security.securityStateChanged Deprecated
- Security.visibleSecurityStateChanged Experimental
Types
- Security.CertificateErrorAction
- Security.CertificateId
- Security.MixedContentType
- Security.SecurityState
- Security.SecurityStateExplanation
- Security.InsecureContentStatus Deprecated
- Security.CertificateSecurityState Experimental
- Security.SafetyTipInfo Experimental
- Security.SafetyTipStatus Experimental
- Security.VisibleSecurityState Experimental
Methods
Security.setIgnoreCertificateErrors #
Enable/disable whether all certificate errors should be ignored.
Parameters
ignore booleanIf true, all certificate errors will be ignored.
Security.handleCertificateError Deprecated#
Handles a certificate error that fired a certificateError event.
Parameters
eventId integerThe ID of the event.
action The action to take on the certificate error.
Security.setOverrideCertificateErrors Deprecated#
Enable/disable overriding certificate errors. If enabled, all certificate error events need to
be handled by the DevTools client and should be answered with handleCertificateError commands.
Parameters
override booleanIf true, certificate errors will be overridden.
Events
Security.certificateError Deprecated#
There is a certificate error. If overriding certificate errors is enabled, then it should be
handled with the handleCertificateError command. Note: this event does not fire if the
certificate error has been allowed internally. Only one client per target should override
certificate errors at the same time.
Parameters
eventId integerThe ID of the event.
errorType stringThe type of the error.
requestURL stringThe url that was requested.
Security.securityStateChanged Deprecated#
The security state of the page changed. No longer being sent.
Parameters
securityState Security state.
schemeIsCryptographic booleanTrue if the page was loaded over cryptographic transport such as HTTPS.
explanations array[ SecurityStateExplanation ]Previously a list of explanations for the security state. Now always empty.
insecureContentStatus summaryOptional
stringOverrides user-visible description of the state. Always omitted.
Security.visibleSecurityStateChanged Experimental#
The security state of the page changed.
Parameters
visibleSecurityState Security state information about the page.
Types
Security.CertificateErrorAction #
The action to take when a certificate error occurs. continue will continue processing the request and cancel will cancel the request.
Type: string
Allowed values: continue, cancel
Security.MixedContentType #
A description of mixed content (HTTP resources on HTTPS pages), as defined by https://www.w3.org/TR/mixed-content/#categories
Type: string
Allowed values: blockable, optionally-blockable, none
Security.SecurityState #
The security level of a page or resource.
Type: string
Allowed values: unknown, neutral, insecure, secure, info, insecure-broken
Security.SecurityStateExplanation #
An explanation of an factor contributing to the security state.
Type: object
Properties
securityState Security state representing the severity of the factor being explained.
title stringTitle describing the type of factor.
summary stringShort phrase describing the type of factor.
description stringFull text explanation of the factor.
mixedContentType The type of mixed content described by the explanation.
certificate array[ string ]Page certificate.
recommendationsOptional
array[ string ]Recommendations to fix any issues.
Security.InsecureContentStatus Deprecated#
Information about insecure content on the page.
Type: object
Properties
ranMixedContent booleanAlways false.
displayedMixedContent booleanAlways false.
containedMixedForm booleanAlways false.
ranContentWithCertErrors booleanAlways false.
displayedContentWithCertErrors booleanAlways false.
ranInsecureContentStyle Always set to unknown.
displayedInsecureContentStyle Always set to unknown.
Security.CertificateSecurityState Experimental#
Details about the security state of the page certificate.
Type: object
Properties
protocol stringProtocol name (e.g. "TLS 1.2" or "QUIC").
keyExchange stringKey Exchange used by the connection, or the empty string if not applicable.
keyExchangeGroupOptional
string(EC)DH group used by the connection, if applicable.
cipher stringCipher name.
macOptional
stringTLS MAC. Note that AEAD ciphers do not have separate MACs.
certificate array[ string ]Page certificate.
subjectName stringCertificate subject name.
issuer stringName of the issuing CA.
validFrom Certificate valid from date.
validTo Certificate valid to (expiration) date
certificateNetworkErrorOptional
stringThe highest priority network error code, if the certificate has an error.
certificateHasWeakSignature booleanTrue if the certificate uses a weak signature algorithm.
certificateHasSha1Signature booleanTrue if the certificate has a SHA1 signature in the chain.
modernSSL booleanTrue if modern SSL
obsoleteSslProtocol booleanTrue if the connection is using an obsolete SSL protocol.
obsoleteSslKeyExchange booleanTrue if the connection is using an obsolete SSL key exchange.
obsoleteSslCipher booleanTrue if the connection is using an obsolete SSL cipher.
obsoleteSslSignature booleanTrue if the connection is using an obsolete SSL signature.
Security.SafetyTipInfo Experimental#
Type: object
Properties
safetyTipStatus Describes whether the page triggers any safety tips or reputation warnings. Default is unknown.
safeUrlOptional
stringThe URL the safety tip suggested ("Did you mean?"). Only filled in for lookalike matches.
Security.VisibleSecurityState Experimental#
Security state information about the page.
Type: object
Properties
securityState The security level of the page.
certificateSecurityStateOptional
Security state details about the page certificate.
safetyTipInfoOptional
The type of Safety Tip triggered on the page. Note that this field will be set even if the Safety Tip UI was not actually shown.
securityStateIssueIds array[ string ]Array of security state issues ids.