Issue 126959 - Several of the forums have mixed http/https content
Summary: Several of the forums have mixed http/https content
Status: CLOSED OBSOLETE
Alias: None
Product: Infrastructure
Classification: Infrastructure
Component: Forums (show other issues)
Version: current
Hardware: All All
: P5 (lowest) Normal (vote)
Target Milestone: ---
Assignee: AOO issues mailing list
QA Contact:
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2016-05-10 10:32 UTC by sebb
Modified: 2021-05-27 19:46 UTC (History)
2 users (show)

See Also:
Issue Type: DEFECT
Latest Confirmation in: ---
Developer Difficulty: ---


Attachments

Note You need to log in before you can comment on or make changes to this issue.
Description sebb 2016-05-10 10:32:05 UTC
Several of the forums have mixed http/https content.
These shows up as warnings in browsers.

https://forum.openoffice.org/en/forum/ - OK
https://forum.openoffice.org/fr/forum/ - NAK
https://forum.openoffice.org/ - NAK

Most likely there are some images using http:// rather than https://
Comment 1 oooforum (fr) 2016-05-11 08:27:43 UTC
(In reply to sebb from comment #0)
> Most likely there are some images using http:// rather than https://
I don't see any images linked to http: 
Could you give more details about these?
Comment 2 sebb 2016-05-11 10:08:29 UTC
These issues are easy to find with a modern browser with its developer tools.

For example, using Chrome with the Developer Tools enabled:

The page at 'https://forum.openoffice.org/fr/forum/' was loaded over HTTPS, but requested an insecure image 'http://logv31.xiti.com/bcg.xiti?s=261203&p=&hl=11x4x13&r=1920x1080x24x24&ref='. This content should also be served over HTTPS.

===

Mixed Content: The page at 'https://forum.openoffice.org/' was loaded over HTTPS, but requested an insecure stylesheet 'http://www.openoffice.org/branding/css/home.css'. This request has been blocked; the content must be served over HTTPS.
forum.openoffice.org/:1 Mixed Content: The page at 'https://forum.openoffice.org/' was loaded over HTTPS, but requested an insecure script 'http://download.openoffice.org/languages.js'. This request has been blocked; the content must be served over HTTPS.
forum.openoffice.org/:1 Mixed Content: The page at 'https://forum.openoffice.org/' was loaded over HTTPS, but requested an insecure script 'http://download.openoffice.org/download.js'. This request has been blocked; the content must be served over HTTPS.
(index):252 GET https://forum.openoffice.org/images/action-bg.png 404 (Not Found)
2(index):1 Mixed Content: The page at 'https://forum.openoffice.org/' was loaded over HTTPS, but requested an insecure favicon 'http://www.openoffice.org/branding/images/favicon.ico'. This content should also be served over HTTPS.
Comment 3 oooforum (fr) 2016-05-12 07:11:41 UTC
(In reply to sebb from comment #2)
> The page at 'https://forum.openoffice.org/fr/forum/' was loaded over HTTPS,
> but requested an insecure image
> 'http://logv31.xiti.com/bcg.
> xiti?s=261203&p=&hl=11x4x13&r=1920x1080x24x24&ref='. This content should
> also be served over HTTPS.

OK Thanks for investigate.
This is a marker for our statistics since 2005.
Unable to replace with an HTTPS link because we use a free solution.
Comment 4 sebb 2016-05-12 18:20:58 UTC
(In reply to oooforum (fr) from comment #3)
> (In reply to sebb from comment #2)
> > The page at 'https://forum.openoffice.org/fr/forum/' was loaded over HTTPS,
> > but requested an insecure image
> > 'http://logv31.xiti.com/bcg.
> > xiti?s=261203&p=&hl=11x4x13&r=1920x1080x24x24&ref='. This content should
> > also be served over HTTPS.
> 
> OK Thanks for investigate.
> This is a marker for our statistics since 2005.
> Unable to replace with an HTTPS link because we use a free solution.

In that case I suggest either dropping the statistics (none of the other forums seem to use it) or using a different solution which does not cause browsers to report a problem.

The errors on the main forum page should be easy to fix.
Comment 5 Marcus 2021-05-27 19:46:33 UTC
Outdated issue.