在应用程序中,通过ajax将url调用4次。由于某种原因,当第四次在特定页面上发出请求时,ajax请求被取消。
第四个请求的请求标头中有“已显示临时标头”,由于某种原因,发出了第5个请求(类似于第4个请求)(不是由应用程序提供)。
我能够使用chrome:// net-internals进行一些挖掘。
下面我完全重现了第三个请求和第四个请求,主要区别在于网络日志的HTTP_TRANSACTION_READ_HEADERS部分。
以下是第4个请求中的全部数据(由于某些原因,它返回了302,与其他3个请求不同-
t=61558 [st= 0] +REQUEST_ALIVE [dt=274]
--> priority = "MEDIUM"
--> url = "https://example.com/api/v1/track/login?time=1556662845627"
t=61559 [st= 1] NETWORK_DELEGATE_BEFORE_URL_REQUEST [dt=0]
t=61559 [st= 1] +URL_REQUEST_START_JOB [dt=273]
--> load_flags = 0 (NORMAL)
--> method = "POST"
--> privacy_mode = 0
--> upload_id = "0"
--> url = "https://example.com/api/v1/track/login?time=1556662845627"
t=61559 [st= 1] NETWORK_DELEGATE_BEFORE_START_TRANSACTION [dt=0]
t=61559 [st= 1] HTTP_CACHE_GET_BACKEND [dt=0]
t=61559 [st= 1] +HTTP_STREAM_REQUEST [dt=0]
t=61559 [st= 1] HTTP_STREAM_JOB_CONTROLLER_BOUND
--> source_dependency = 1619753 (HTTP_STREAM_JOB_CONTROLLER)
t=61559 [st= 1] HTTP_STREAM_REQUEST_BOUND_TO_JOB
--> source_dependency = 1619754 (HTTP_STREAM_JOB)
t=61559 [st= 1] -HTTP_STREAM_REQUEST
t=61559 [st= 1] UPLOAD_DATA_STREAM_INIT [dt=0]
--> is_chunked = false
--> net_error = 0 (?)
--> total_size = 112
t=61559 [st= 1] +HTTP_TRANSACTION_SEND_REQUEST [dt=1]
t=61559 [st= 1] HTTP_TRANSACTION_HTTP2_SEND_REQUEST_HEADERS
--> :method: POST
:authority: example.com
:scheme: https
:path: /api/v1/track/login?time=1556662845627
content-length: 112
accept: application/json, text/javascript, */*; q=0.01
origin: https://example.com
x-requested-with: XMLHttpRequest
user-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.103 Safari/537.36
content-type: application/x-www-form-urlencoded; charset=UTF-8
referer: https://example.com/index.php
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: [1570 bytes were stripped]
t=61560 [st= 2] UPLOAD_DATA_STREAM_READ [dt=0]
--> current_position = 0
t=61560 [st= 2] HTTP2_STREAM_UPDATE_SEND_WINDOW
--> delta = -112
--> stream_id = 117
--> window_size = 65424
t=61560 [st= 2] -HTTP_TRANSACTION_SEND_REQUEST
t=61560 [st= 2] +HTTP_TRANSACTION_READ_HEADERS [dt=270]
t=61830 [st=272] HTTP_TRANSACTION_READ_RESPONSE_HEADERS
--> HTTP/1.1 302
status: 302
date: Tue, 30 Apr 2019 22:20:45 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: http://example.com/api/v1/track/login?time=1556662845627
server: Apache/2.4.25 (Debian)
x-powered-by: PHP/5.6.39
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
set-cookie: [74 bytes were stripped]
set-cookie: [77 bytes were stripped]
access-control-allow-origin: *
access-control-allow-headers: origin, x-requested-with, content-type
access-control-allow-methods: PUT, GET, POST, DELETE, OPTIONS
t=61830 [st=272] -HTTP_TRANSACTION_READ_HEADERS
t=61830 [st=272] NETWORK_DELEGATE_HEADERS_RECEIVED [dt=0]
t=61830 [st=272] URL_REQUEST_DELEGATE_RECEIVED_REDIRECT [dt=2]
t=61832 [st=274] CANCELLED
t=61832 [st=274] -REQUEST_ALIVE
以下是第三个请求中的全部数据-
t=61346 [st= 0] +REQUEST_ALIVE [dt=97]
--> priority = "MEDIUM"
--> url = "https://test.undostres.com.mx/api/v1/track/login?time=1556662845405"
t=61346 [st= 0] NETWORK_DELEGATE_BEFORE_URL_REQUEST [dt=0]
t=61346 [st= 0] +URL_REQUEST_START_JOB [dt=97]
--> load_flags = 0 (NORMAL)
--> method = "POST"
--> privacy_mode = 0
--> upload_id = "0"
--> url = "https://test.undostres.com.mx/api/v1/track/login?time=1556662845405"
t=61346 [st= 0] NETWORK_DELEGATE_BEFORE_START_TRANSACTION [dt=0]
t=61346 [st= 0] HTTP_CACHE_GET_BACKEND [dt=0]
t=61346 [st= 0] +HTTP_STREAM_REQUEST [dt=1]
t=61346 [st= 0] HTTP_STREAM_JOB_CONTROLLER_BOUND
--> source_dependency = 1619732 (HTTP_STREAM_JOB_CONTROLLER)
t=61347 [st= 1] HTTP_STREAM_REQUEST_BOUND_TO_JOB
--> source_dependency = 1619733 (HTTP_STREAM_JOB)
t=61347 [st= 1] -HTTP_STREAM_REQUEST
t=61347 [st= 1] UPLOAD_DATA_STREAM_INIT [dt=0]
--> is_chunked = false
--> net_error = 0 (?)
--> total_size = 105
t=61347 [st= 1] +HTTP_TRANSACTION_SEND_REQUEST [dt=1]
t=61347 [st= 1] HTTP_TRANSACTION_HTTP2_SEND_REQUEST_HEADERS
--> :method: POST
:authority: test.undostres.com.mx
:scheme: https
:path: /api/v1/track/login?time=1556662845405
content-length: 105
accept: application/json, text/javascript, */*; q=0.01
origin: https://test.undostres.com.mx
x-requested-with: XMLHttpRequest
user-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.103 Safari/537.36
content-type: application/x-www-form-urlencoded; charset=UTF-8
referer: https://test.undostres.com.mx/index.php
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: [1345 bytes were stripped]
t=61348 [st= 2] UPLOAD_DATA_STREAM_READ [dt=0]
--> current_position = 0
t=61348 [st= 2] HTTP2_STREAM_UPDATE_SEND_WINDOW
--> delta = -105
--> stream_id = 113
--> window_size = 65431
t=61348 [st= 2] -HTTP_TRANSACTION_SEND_REQUEST
t=61348 [st= 2] +HTTP_TRANSACTION_READ_HEADERS [dt=95]
t=61443 [st=97] HTTP_TRANSACTION_READ_RESPONSE_HEADERS
--> HTTP/1.1 200
status: 200
date: Tue, 30 Apr 2019 22:20:45 GMT
content-type: text/html; charset=UTF-8
content-length: 41
server: Apache/2.4.25 (Debian)
x-powered-by: PHP/5.6.39
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: origin, x-requested-with, content-type
access-control-allow-methods: PUT, GET, POST, DELETE, OPTIONS
t=61443 [st=97] -HTTP_TRANSACTION_READ_HEADERS
t=61443 [st=97] NETWORK_DELEGATE_HEADERS_RECEIVED [dt=0]
t=61443 [st=97] -URL_REQUEST_START_JOB
t=61443 [st=97] URL_REQUEST_DELEGATE_RESPONSE_STARTED [dt=0]
t=61443 [st=97] +HTTP_TRANSACTION_READ_BODY [dt=0]
t=61443 [st=97] HTTP2_STREAM_UPDATE_RECV_WINDOW
--> delta = -41
--> stream_id = 113
--> window_size = 6291415
t=61443 [st=97] -HTTP_TRANSACTION_READ_BODY
t=61443 [st=97] URL_REQUEST_JOB_FILTERED_BYTES_READ
--> byte_count = 41
t=61443 [st=97] HTTP_TRANSACTION_READ_BODY [dt=0]
t=61443 [st=97] -REQUEST_ALIVE
在尝试解决此问题时,我们可以使用以下代码进行操作-
<meta http-equiv="Content-Security-Policy" content="upgrade-insecure-requests">
但这毫无意义。
PS-这是一些服务器日志。您会注意到,经过一些尝试,相同的api变为302。此外,this似乎相关,但是没有用。
189.213.84.17 - - [30/Apr/2019:22:19:31 -0500] "POST /api/v1/track/login?time=1556680771692 HTTP/1.1" 200 1316 "https://example.com/index.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.103 Safari/537.36"
189.213.84.17 - - [30/Apr/2019:22:19:32 -0500] "POST /api/v1/track/login?time=1556680772165 HTTP/1.1" 200 1316 "https://example.com/index.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.103 Safari/537.36"
189.213.84.17 - - [30/Apr/2019:22:19:32 -0500] "POST /api/v1/track/login?time=1556680772167 HTTP/1.1" 200 1316 "https://example.com/index.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.103 Safari/537.36"
189.213.84.17 - - [30/Apr/2019:22:19:32 -0500] "POST /api/v1/track/login?time=1556680772393 HTTP/1.1" 302 1534 "https://example.com/index.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.103 Safari/537.36"
答案 0 :(得分:1)
您的网络服务器似乎正在将重定向返回到不安全的网址
HTTP_TRANSACTION_READ_RESPONSE_HEADERS
--> HTTP/1.1 302
status: 302
date: Tue, 30 Apr 2019 22:20:45 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: http://example.com/api/v1/track/login?time=1556662845627
Chrome拒绝重定向到该URL,因为它已经在HTTPS上。我猜想只要有了meta标签,Chrome就会自动将HTTP转换为HTTPS,并且一切正常。
所以首先要看的是服务器为什么已经接收到HTTPS请求时将重定向发送到HTTP URL。
答案 1 :(得分:0)
问题是作为对ajax请求的响应而发送的应用程序级重定向(位置:...)。