Search code examples
httpsweinre

How do I debug an https loaded page using weinre?


I'm trying to debug using weinre, and have set up a simple test in Chrome to make sure everything is working. However, in the developer tools I get the error:

"The page at 'https://myhost/...' was loaded over HTTPS, but ran insecure content from 'http://localhost:8080/target/target-script-min.js': this content should also be loaded over HTTPS.

I had seen some other answers with regards to debugging "Cordova" or "Phonegap". I am not using either of these things and the answers suggested do not seem to apply here. I am trying to debug simple HTML/Javascript only.

I don't see any mention on the weinre web page of enabling https support (it explicitly mentions that it doesn't use https), and I don't have a lot of control over the browser side (this needs to work on various android browsers which are notorious, in my mind anyway, at being totally unfriendly towards local debugging, which is in fact the reason I am trying to debug using weinre), so I am at a loss as to how to proceed. Not using https is out of the question, as the page passes sensitive information; using weinre over http is acceptable because I am tunnelling the connection over ssh.

Update: I have also tried using the boomarklet method: I added the bookmarklet URL to Chrome Mobile, but when I try navigating to the bookmarklet, it appears to unload the original page: I can see the connection made, but when I look at the resources, all I see is what appears to be the bookmarklet. But if I try to run the bookmarklet by typing the name of the bookmarklet until the starred javascript code appears in autocomplete, it stays on the current page, but no targets show up in the client page. I assume it is for the same reason, as I see the bookmarklet referencing http://localhost:2000.


Solution

  • To get by browser restrictions, weinre pages can be served from https instead of http using a reverse proxy. This is somewhat of a brute-force solution, but adding the following lines to the end of my /etc/httpd.conf file were sufficient to proxy all the pages weinre requests from the server: in my case, none of these conflict with existing files or directories.

    ProxyPass       /target/  http://localhost:8080/target/
    ProxyPassReverse          /target/  http://localhost:8080/target/
    ProxyPass       /client/  http://localhost:8080/client/
    ProxyPassReverse          /client/  http://localhost:8080/client/
    ProxyPass       /weinre/  http://localhost:8080/weinre/
    ProxyPassReverse          /weinre/  http://localhost:8080/weinre/
    ProxyPass       /interfaces/  http://localhost:8080/interfaces/
    ProxyPassReverse          /interfaces/  http://localhost:8080/interfaces/
    ProxyPass       /modjewel.js  http://localhost:8080/modjewel.js
    ProxyPass       /images/  http://localhost:8080/images/
    ProxyPassReverse          /images/  http://localhost:8080/images/
    ProxyPass       /ws/  http://localhost:8080/ws/
    ProxyPassReverse          /ws/  http://localhost:8080/ws/
    

    It is also necessary to define window.WeinreServerURL, as Weinre does a regex on http:/ to try to get the URL of the server. This will fail since the server is https, not http. In my case, I added a statement of the following form to the bookmarklet as the first statement in the function:

    window.WeinreServerURL="https://server:port/
    

    With this in place I was able to point my browser at https://server:port/client/#anonymous to bring up the debug page, and run the bookmarklet from the page under debug.