iOS UIWebView检测混合SSL内容

Question

如何检测在WebView中显示包含非SSL资产的SSL URL的任何尝试？就像浏览器给你一个混合的SSL警告。

我在UIWebView或UIWebViewDelegate上看不到任何明显的属性。我可以继承NSURLProtocol，并以某种方式将非SSL连接传回给UIWebView。有没有更简单的方法来做到这一点？

Answer 1

一个解决方案是创建自定义URL缓存并将其设置为默认值，以便您可以捕获所有HTTP请求，然后您可以检查混合SSL内容。

下面是一个例子：

@interface MonitoringURLCache : NSURLCache 
@end 

@implementation MonitoringURLCache 
- (NSCachedURLResponse*)cachedResponseForRequest:(NSURLRequest *)request { 
    NSURL *requestURL = [request URL]; 
    NSURL *pageURL = [request mainDocumentURL]; 

    if ([[pageURL scheme] isEqualToString:@"https"] && [[requestURL scheme] isEqualToString:@"http"]) { 
     NSLog(@"Non safe resource: %@ referenced from page: %@", requestURL, pageURL); 
    } 

    return [super cachedResponseForRequest:request]; 
} 
@end 

/// Register your custom cache 
MonitoringURLCache *cache = [[MonitoringURLCache alloc] init]; 
[NSURLCache setSharedURLCache:cache]; 

/// Make a request to a website with mixed SSL content 
NSURL *url = [NSURL URLWithString:@"https://some-website-with-mixed-ssl-content/"]; 
NSURLRequest *request = [NSURLRequest requestWithURL:url]; 
[webview loadRequest:request];