mcdetect is a tool that detects mixed content issues with certainty.
Tools used to catch mixed content issues often rely on parsing the DOM to determine if insecure content will be loaded in a specific page. Consequently they may report false negatives since not all such issues can be detected statically.
mcdetect can determine with absolute certainty if any mixed content errors or warnings actually occur on a page. It does this by visiting the pages and evaluating their Javascript like a regular browser would do. In other words, it does not report false negatives.
It does this by leveraging Headless Chrome that shipped with Chrome 59 and the DevTools Protocol.
$ npm install -g mcdetect
Checking a single target page:
$ mcdetect https://example.com https://google.com
Checking multiple targets (if no protocol is specified, it is assumed to be "https://"):
$ mcdetect example.com google.com
Multiple targets can also be given via a config file:
$ cat my_urls.json
{
"targets": [
"googlesamples.github.io/web-fundamentals/fundamentals/security/prevent-mixed-content/xmlhttprequest-example.html",
"googlesamples.github.io/web-fundamentals/fundamentals/security/prevent-mixed-content/passive-mixed-content.html"
]
}
$ mcdetect --config my_urls.json
For more usage examples and options see mcdetect --help.
mcdetect is licensed under MIT. See LICENSE.
RetroSearch is an open source project built by @garambo | Open a GitHub Issue
Search and Browse the WWW like it's 1997 | Search results from DuckDuckGo
HTML:
3.2
| Encoding:
UTF-8
| Version:
0.7.3