Avoiding NavigatorUserMediaError "Only secure origins are allowed" on HTTP in Chrome

google-chrome security https media
Andrei F picture Andrei F · Dec 25, 2015 · Viewed 25.5k times · Source

I'm trying to make some audio/video tests with a JavaScript library for SIP phones and since Chrome 47 I can no longer test in local development because of this error: 

NavigatorUserMediaError {}
constraintName: ""
message: "Only secure origins are allowed (see:https://goo. gl/Y0ZkNV)."
name: "PermissionDeniedError"

Is there an option (flag) in Chrome to disable this? Or is there a way to download older versions of Chrome (I couldn't find any)?

Answer

Rupert Rawnsley picture Rupert Rawnsley · Jun 10, 2016

The unsafely-treat-insecure-origin-as-secure flag works for me as documented here.

On OS X this looks like:

$ /Applications/Google\ Chrome.app/Contents/MacOS/Google\ Chrome --user-data-dir=/tmp/foo --unsafely-treat-insecure-origin-as-secure=http://alt.local:8080

For various reasons, my local development server doesn't run on localhost or port 80. Specifying the alternative port appears to be necessary.

The user-data-dir directive appears to create a temporary sandbox profile in Chrome.

Related questions

Mixed content in Chrome and IE

In my HTTPS enabled site I have added an iframe that should show content from my other site, but it is not working under https. <iframe src="//myothersite.com"></iframe> In Firefox latest version everything works …

Read More
Chrome now blocking all jsonp requests from https to http?

At some point recently Chrome has stopped showing data loaded via jsonp with the error [blocked] The page at https://user.example.com/category/12345 ran insecure content from http://livedata.example.com/Data.svc/jsonp/GetData?category=12345&callback=_jsp&…

Read More
XMLHttpRequest cannot load file. Cross origin requests are only supported for HTTP

I am getting the following error: XMLHttpRequest cannot load file:///C:/Users/richa.agiwal/Desktop/get/rm_Library/templates/template_viewSettings.html. Cross origin requests are only supported for HTTP. I realize that this question has been answered before, but …

Read More