Anonymous | Login | Signup for a new account | 2021-01-17 07:17 CET | ![]() |
Main | My View | View Issues | Change Log | Roadmap |
View Issue Details [ Jump to Notes ] | [ Issue History ] [ Print ] | ||||||||
ID | Project | Category | View Status | Date Submitted | Last Update | ||||
0000680 | YaCy | [All Projects] General | public | 2016-08-17 10:52 | 2016-08-20 00:38 | ||||
Reporter | luc | ||||||||
Assigned To | BuBu | ||||||||
Priority | normal | Severity | minor | Reproducibility | always | ||||
Status | resolved | Resolution | fixed | ||||||
ETA | none | ||||||||
Platform | OS | OS Version | |||||||
Product Version | YaCy 1.8 | ||||||||
Target Version | Fixed in Version | ||||||||
Summary | 0000680: YaCy with HTTPS : mixed content warnings and errors | ||||||||
Description | When running a YaCy peer with SSL enabled (we should rather say TLS) and opening its web interface with HTTPS, browser console display warnings or even blocks "mixed content" : "Mixed Content: The page at 'https://[yourhost]/yacysearch.html?query=searchterms&Enter=&verify [^]…=5&resource=global&prefermaskfilter=&maximumRecords=10&timezoneOffset=-120' was loaded over HTTPS, but requested an insecure image 'http://yacy.net/images/flattr.png'. [^] This content should also be served over HTTPS." | ||||||||
Steps To Reproduce | - Enable SSL on your YaCy peer at /ConfigBasic.html - Open your browser console (using F12 key for example) - Open your peer search interface using https - Search something - Security warnings are displayed about resources in the donate.html frame - Open the search comparator : /compare_yacy.html - Choose bing.com, metager.de or yahoo.com for example as the right side engine - Search something - Content on the right side is blocked - Open Portal Config page : /ConfigPortal.html - Preview frames content is blocked - Open Search Page Layout page : /ConfigSearchPage_p.html - The same security warnings as in search results page are displayed | ||||||||
Additional Information | Fix ideas : - Images for the donate.html frame should be embedded in each YaCy peer : they add unnecessary load to the yacy.net webserver - URLs in the compare view should start with https when possible - Portal config page frames preview URLs should start with https when SSL is enabled | ||||||||
Tags | No tags attached. | ||||||||
Attached Files | |||||||||
![]() |
|
(0001284) luc (reporter) 2016-08-17 17:28 |
A fix is proposed in Pull Request 67 : https://github.com/yacy/yacy_search_server/pull/67 [^] |
(0001285) BuBu (developer) 2016-08-20 00:38 |
provided patch applied https://github.com/yacy/yacy_search_server/pull/67 [^] |
![]() |
|||
Date Modified | Username | Field | Change |
2016-08-17 10:52 | luc | New Issue | |
2016-08-17 17:28 | luc | Note Added: 0001284 | |
2016-08-20 00:38 | BuBu | Note Added: 0001285 | |
2016-08-20 00:38 | BuBu | Status | new => resolved |
2016-08-20 00:38 | BuBu | Resolution | open => fixed |
2016-08-20 00:38 | BuBu | Assigned To | => BuBu |
Copyright © 2000 - 2021 MantisBT Team |