nostradamIQ icon indicating copy to clipboard operation
nostradamIQ copied to clipboard

HTTPS // HTTP Security issues for some content

Open passiweinberger opened this issue 10 years ago • 4 comments

Maybe automatically disable protection for this site? Firefox for example automatically blocks all the content fetched from non-secure origins, but we need it.

passiweinberger avatar Sep 07 '15 10:09 passiweinberger

try to replace links like http://yourlink.de/ or https://yourlink.de/ with //yourlink.de/

lepszy avatar Sep 07 '15 11:09 lepszy

@lepszy tried it... Already had some relative, but these didn't work either. Now all are relative but still doesn't fix it :S The only way to still load them currently is to manually disable the security on your browser, but there has to be a way to get around it :S

passiweinberger avatar Sep 07 '15 12:09 passiweinberger

in https all content you will be loading has to be https, too. lepszy's proposal with // is the common way to address this.

if you have content which is available only through http, this can be solved e.g. through a proxy.

sadly its a php app, so i cannot assist here. with node we could implement a smarter microservice architecture with e.g. a proxy. ;)

for integration of oauth tokens etc you should not consider switching back to http.

i will have a look though from the frontend side...

2075 avatar Sep 07 '15 22:09 2075

most issues seem to come from climateviewer, they offer https with a selfsigned certificate, should work, though:

http://climateviewer.net/netj1/proxy?http%3A%2F%2Fwww.tryse.net%2Fkmlfactbook%2Fflag%2Fwe.gif Failed to load resource: the server responded with a status of 404 (Not Found) Cesium.js:432 Error loading image for billboard: [object Event]

2075 avatar Sep 07 '15 22:09 2075