iOS 10“开始WebFilter记录进程” +请求中删除了代理授权标头 [英] iOS 10 "Starting WebFilter logging for process" + Proxy-Authorization header removed from request

问题描述

从iOS 10开始我在我的应用程序中发现了这样的日志

Starting from iOS 10 I noticed such logs in my app

yyyy-MM-dd HH:mm:sss HelloWorld[XXX:XXXXXX] WF: === Starting WebFilter logging for process HelloWorld
yyyy-MM-dd HH:mm:sss HelloWorld[XXX:XXXXXX] WF: _userSettingsForUser mobile: {
    filterBlacklist =     (
    );
    filterWhitelist =     (
    );
    restrictWeb = 1;
    useContentFilter = 0;
    useContentFilterOverrides = 0;
    whitelistEnabled = 0;
}
yyyy-MM-dd HH:mm:sss HelloWorld[XXX:XXXXXX] WF: _WebFilterIsActive returning: NO

我已查看 iOS 10发行说明但没有关于WebFilter功能的信息

I have reviewed iOS 10 Release notes but there is no info about WebFilter feature

此外，我注意到某些网站代理授权已删除来自请求（我使用编程配置的代理），这个问题从iOS 10开始。

Also I noticed that for some sites Proxy-Authorization removed from request (I use programmatically configured proxy) and this issue started from iOS 10.

任何人都可以对此有所了解吗？

Anybody can throw a light on this?

更新1

我发现这种情况很稳定

1. 某些网站的WebView请求 / example.org 超过 https


2. 收到 html 包含 http 链接某些资源（css的图片），例如 http://example.org/icon.png


3. 这会导致标题删除

1. WebView request / for some site example.org over https
2. Received html contains http link to some resource (image for css) like http://example.org/icon.png
3. This lead to Header removal

推荐答案

使用Chrome开发者工具检查网站，您很可能会发现类似混合内容的警告：...处的页面为通过HTTPS加载，但请求不安全的资源'...'。此内容也应通过HTTPS提供。

Check the site with Chrome Developer Tools and you will most likely find a warning like Mixed Content: The page at '...' as loaded over HTTPS, but requested an insecure resource '...'. This content should also be served over HTTPS.

根据Apple的说法，Safari 10中的内容安全策略（CSP）支持已经过通过包含该标准的2.0版本得到增强。这似乎也包括iOS 10。

According to Apple the "Content Security Policy (CSP) support" in Safari 10 "has been enhanced by including version 2.0 of the standard." It seems that this includes iOS 10 as well.

在这里看一下CSP级别： https://content-security-policy.com

Have a look here about the CSP levels: https://content-security-policy.com

这篇关于iOS 10“开始WebFilter记录进程” +请求中删除了代理授权标头的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！