mahara-contributors team mailing list archive

[Darren James Harkness <1240401@xxxxxxxxxxxxxxxxxx>]

Something to note (re: scenario in #2) is that it does not trip the
browser's option to allow insecure content.  For example, in Firefox,
mixed mode can be enabled by clicking on the Shield icon and allowing
the insecure content (see https://support.mozilla.org/en-US/kb/how-does-
content-isnt-secure-affect-my-safety).  On the portfolio edit page, this
icon is never made available in Firefox.

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it!
https://bugs.launchpad.net/bugs/1240401

Title:
  Mixed content blocked

Status in Mahara ePortfolio:
  Confirmed

Bug description:
  Browers blocking mixed content, esp. when you are on a SSL enabled
  site is becoming more of an issue esp. since not all browsers make
  this blocking obvious. Firefox only has a small icon in the universal
  bar.

  We already fixed bug #1207140 but that doesn't apply to other places
  where mixed content is used, e.g. in external image galleries. Flickr
  for example typically shows you http, but you can use the same URL
  under https. Thus, if you know that, you can use that instead on your
  SSL site.

  Is there a way of implementing something like the protocol relevant
  URL in Mahara or make it more obvious that content can't be displayed
  due to it being mixed? With more and more people having SSL, this will
  become more of a question.

  For an example, see
  https://mahara.org/interaction/forum/topic.php?id=5712

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1240401/+subscriptions