Looks like the issue is in webbrowser-app indeed. I’ve instrumented the WebView to monitor changes to the 'url' property, and it’s correctly updated to https, whereas the address bar isn’t updated.
** Changed in: webbrowser-app Status: New => Confirmed ** Changed in: webbrowser-app Assignee: (unassigned) => Olivier Tilloy (osomon) ** Changed in: oxide Status: New => Invalid -- You received this bug notification because you are a member of Ubuntu WebApps bug tracking, which is subscribed to webbrowser-app. https://bugs.launchpad.net/bugs/1306615 Title: URL bar doesn't seem to update when a http navigation is upgraded to https due to HSTS Status in Oxide Webview: Invalid Status in Web Browser App: Confirmed Bug description: I ran webbrowser-app on the desktop, and did the following: 1) From the startpage, I typed "http://www.twitter.com/" in the URL bar 2) Twitter loads, and the URL bar updates to "https://twitter.com/" because Twitter uses HSTS and Oxide ships with Twitter hardcoded in the transport security list. 3) I retype "http://www.twitter.com/" in the URL bar whilst already viewing Twitter. 4) The page reloads, but the URL bar doesn't seem to update correctly this time (it displays "http://twitter.com"). I'm not sure yet if this is an Oxide bug or webbrowser-app bug - I didn't see any non-SSL traffic to Twitter in Wireshark when doing the second navigation To manage notifications about this bug go to: https://bugs.launchpad.net/oxide/+bug/1306615/+subscriptions -- Mailing list: https://launchpad.net/~ubuntu-webapps-bugs Post to : ubuntu-webapps-bugs@lists.launchpad.net Unsubscribe : https://launchpad.net/~ubuntu-webapps-bugs More help : https://help.launchpad.net/ListHelp