Skip to content

Embed URLs are http which break mixed content rules on encrypted sites #8

@eudoxos

Description

@eudoxos

When q2a is accessed over https, embeds with http are not displayed -- as a result of Mixed content (http://www.w3.org/TR/mixed-content/) blocking which is on by default in Firefox since some time (and in other browsers, too).

I was able to work around the issue for a site using https exclusively by replacing the protocol in by hand (e.g. in https://github.com/NoahY/q2a-embed/blob/master/qa-embed-layer.php#L51).

The code should find out whether it is accessed through an encrypted connection or not, and use http or https for embedded URLs based on that.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions