HTTP Process Information Retrieval via Segmented Web Applications
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Web browsers display a 'secure/unsecure mixed content' prompt when an HTTPS web application attempts to execute HTTP commands, making it difficult to determine HTTP process information non-obtrusively.
Innovation Solution
Redirect the web browser to an unsecure web application separate from the secure web application to obtain HTTP process information, allowing the unsecure web application to execute and provide the necessary information back to the secure web application without triggering a mixed content prompt.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of information
If an HTTPS web application executes HTTP commands to determine process information, then the required information can be obtained, but a secure/unsecure mixed content prompt is displayed to the user
Solution Approach 1:
The system divides the web application into separate secure (HTTPS) and unsecure (HTTP) components. The HTTPS web application handles secure operations while the HTTP web application handles process information retrieval, allowing each to operate in its appropriate security context without triggering mixed content warnings.
Solution Approach 2:
An HTTP web application acts as an intermediary between the user's HTTP processes and the HTTPS web application. This intermediary can execute HTTP commands without security restrictions and relay the obtained process information back to the HTTPS application through secure communication channels.
2Reliability
If the web browser displays a mixed content prompt, then security awareness is maintained, but seamless determination of HTTP process information is prevented
Solution Approach 1:
By segmenting the application into separate HTTPS and HTTP web applications, the system maintains security awareness in the HTTPS portion while enabling unrestricted HTTP process information retrieval in the HTTP portion, eliminating the need for user prompts and improving information retrieval efficiency.
Solution Approach 2:
The HTTP web application serves as a mediator that handles all HTTP process information requests, allowing the HTTPS web application to maintain security without being blocked from obtaining necessary process information. The intermediary retrieves information efficiently without triggering security warnings.
3Adaptability or versatility
If http web content is included in an https web application, then functionality is enhanced, but security risks increase due to potential content replacement
Solution Approach 1:
The system segments functionality by creating separate HTTPS and HTTP web applications. The HTTPS application maintains security for critical operations while the HTTP application handles process information retrieval, allowing enhanced functionality without compromising content security through mixed content inclusion.
Solution Approach 2:
The HTTP web application acts as a secure intermediary that retrieves process information through HTTP without risking the security of the main HTTPS application. This intermediary approach enables functionality enhancement while isolating security risks to a controlled, separate component.
Data Source
AI summary
A method of determining http process information while executing a secure web application which redirects to a separate an unsecure web application to determine the information and redirect the information back to the secure web application. An example method includes redirecting the web browser software to an unsecure web application for obtaining the information by the computer during execution of the secure application, executing the unsecure web application using the web browser software by the computer to obtain the information about the http process, and redirecting the web browser software to provide the information from the unsecure web application to the secure web application by the computer.