Solved HTTP downloads are blocked from HTTPS webpages

ybab321

For example, if I go to https://en.cppreference.com/w/cpp/23 and try to download P2156R1, the URL resolves to http://www.open-std.org/jtc1/sc22/wg21/docs/papers/2020/p2156r1.pdf which is an HTTP link. Clearly there's nothing cppreference can do about this, but I want to be able to download this file; opening in a new tab doesn't work, right-click save-as does work after confirming in the download manager that I did, in fact, want to download the thing I asked to download.

"Phishing and malware protection" in my vivaldi://settings/privacy/ is disabled, which I would have expected to control this download blocking thing. I would want either that option to control this no-HTTP-allowed rule, or a new rule created, because this really sucks currently.

Many thanks

DoctorG

@ybab321 said in HTTP downloads are blocked from HTTPS webpages:

P2156R1

I can not reproduce the issue.
I get on the page P2156R1 this URL https://wg21.link/P2156R1
Ah, i see, Save as… fails as short link redirect to non-SSL.
Onyly workaround is to show in internal PDF and the use download button of viewer.

DoctorG

@ybab321 That is a known security feature in all Chromiums, block of http URLs if having a web page loaded over SSL.
Workaround: use Shift+Click to get download.

ybab321

@doctorg Thanks for the unexpectedly quick response. I was unaware of shift+click, but it's not helping me, it seems to just open a the link in a new tab where nothing happens, even in an incognito tab with all extensions disabled.

Ideally I'd still like for this security "feature" to be disableable anyway if there's any chance for that.

Thanks again

DoctorG

@ybab321 said in HTTP downloads are blocked from HTTPS webpages:

P2156R1

I can not reproduce the issue.
I get on the page P2156R1 this URL https://wg21.link/P2156R1
Ah, i see, Save as… fails as short link redirect to non-SSL.
Onyly workaround is to show in internal PDF and the use download button of viewer.

ybab321

@doctorg Hm, it occurred to me to try enabling the internal PDF viewer, and that does seem to successfully bypass the security feature. Perha-- wow you're way ahead of me ahaha.

Alright well I can make do with this, but I presume this will still be a problem for non-PDF downloads

iAN CooG

@ybab321 It kinda worked for me: right click/save link as
at some point in the download panel appeared a warning with a choice: This file can't be downloaded securely [Discard] [Keep]
The file it actually already downloaded in my download dir as "Unconfirmed 987339.crdownload"
Pushing on keep, the file gets renamed as p1000r4.pdf
So I confirm the behaviour, which at least can be worked around.
It's another of those silly unwanted excessive "security" features in Chromium that only annoy the user instead of being of any use, without the ability to be disabled.

ybab321

Yup, can just about manage with things as they are, it's just a nuisance. Thanks for confirming and I definitely agree with the last sentence. I'm completely fine with it being on by default, but yeah would be optimal if it could be disabled.