documentation-packages team mailing list archive

[Doug Smythies <1211375@xxxxxxxxxxxxxxxxxx>]

There have been a number of issues with mixed content (https and http)
since the switch to the new theme (the one with the red background
stuff, whereas the "old" theme was brown background stuff).

If I use MS IE, I also get the mixed content warning, but can proceed if
I allow it. Using FFv23, but from a windows computer, I actually get
nothing for search results.

Evidently, the root issue is within the file
"https://www.google.com/afsonline/show_afs_search.js"; which is called
from sample.html when the "search" button is pressed. A possible
solution is to copy the file, change the one occurrence of "http" within
the file to "https", and call the local copy instead. The obvious
potential problem, is what if google makes some change to the file?

Typically, I test help.ubuntu.com changes on one of my test computers
before submitting changes. The test system is not currently setup for
HTTPS, and so I don't have an easy way to test this possible solution.
Also the help.ubuntu.com address is absolute and not relative on each
and every html page within help when using the search function (i.e even
on my test computer, it ends up at help.ununtu.com anyhow).

Another option might be to switch to Google Custom Search Element v2.
According to their intro page, it should not suffer from the mixed
content issue if ones calls the https version instead of the http
version.

References:
http://stackoverflow.com/questions/3838716/how-to-use-google-custom-search-on-https-to-avoid-non-secure-content-prompt
https://developers.google.com/custom-search/docs/js/cselement-devguide

-- 
You received this bug notification because you are a member of
Documentation Packages, which is subscribed to ubuntu-docs in Ubuntu.
https://bugs.launchpad.net/bugs/1211375

Title:
  Search on help.ubuntu.com does not work on FF v23.

Status in “ubuntu-docs” package in Ubuntu:
  Confirmed

Bug description:
  Content is block because the search's results are not secure:

  https://support.mozilla.org/en-US/kb/how-does-content-isnt-secure-
  affect-my-safety?as=u&utm_source=inproduct

  Disabling the protection shows results, but it does not work for a
  subsequent search. In other words, each search has to be disable in
  order to display results.

  At least one other person confirms that the problem is presented on FF
  v23.

  Also 2 people confirm that the problem does not present itself on
  Chromium (28.0.1500.71).

  Additional info:

  $ lsb_release -a

  No LSB modules are available.
  Distributor ID:	Ubuntu
  Description:	Ubuntu 12.04.2 LTS
  Release:	12.04
  Codename:	precise

  $ uname -a

  Linux vaughan 3.2.0-51-generic #77-Ubuntu SMP Wed Jul 24 20:18:19 UTC
  2013 x86_64 x86_64 x86_64 GNU/Linux

  $ apt-cache policy firefox

  firefox:
    Installed: 23.0+build2-0ubuntu0.12.04.1
    Candidate: 23.0+build2-0ubuntu0.12.04.1
    Version table:
   *** 23.0+build2-0ubuntu0.12.04.1 0
          500 http://us.archive.ubuntu.com/ubuntu/ precise-updates/main amd64 Packages
          500 http://security.ubuntu.com/ubuntu/ precise-security/main amd64 Packages
          100 /var/lib/dpkg/status
       11.0+build1-0ubuntu4 0
          500 http://us.archive.ubuntu.com/ubuntu/ precise/main amd64 Packages

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ubuntu-docs/+bug/1211375/+subscriptions