881485 - https://www.apple.com/apple-events/june-2013/ does not work properly because of mixed content blocking

Status: RESOLVED FIXED

(Web Compatibility :: Site Reports, defect)

Description

[Matt Wobensmith [:mwobensmith][:matt:]]

Mixed content blocking is a feature that prevents insecure elements on secure pages from loading. In Firefox 23, this feature will default to blocking "active" insecure content, which may break some web sites. 

More information on Firefox's Mixed Content Blocker is below: 
http://blog.mozilla.org/tanvi/2013/04/10/mixed-content-blocking-enabled-in-firefox-23/

The security feature is currently breaking the HTTPS version of apple.com. It also appears to be functioning incorrectly in Chrome 26 and IE10.

https://apple.com/ should render and function like http://apple.com/, but it doesn't because some HTTP resource(s) are not loaded. Here is a list of the active, HTTP resources that were blocked on https://www.apple.com/apple-events/june-2013/: 

Blocked loading mixed active content "http://events.apple.com.edgesuite.net/13oygadvoyibawefpiuawefpiuawdf6/event/url.js" @ https://www.apple.com/apple-events/june-2013/

Comment 1

[Adam Stevenson [:adamopenweb]]

Confirmed this still exists. Moving to desktop component.

Comment 2

[Karl Dubost💡 :karlcow]

to 

> https://apple.com/ should render and function like 
> http://apple.com/, but it doesn't because some HTTP resource(s) are not loaded.

this is not the case anymore. Everything is fine there.


This is still the case for https://www.apple.com/apple-events/june-2013/

note that when using HTTPS we get an untrusted connection issue.
https://events.apple.com.edgesuite.net/13oygadvoyibawefpiuawefpiuawdf6/event/url.js

Comment 3

[Karl Dubost💡 :karlcow]

This seems to be fixed.

Comment 4

[Hallvord R. M. Steen [:hallvors]]

I see at least one request for http://events.apple.com.edgesuite.net/13oygadvoyibawefpiuawefpiuawdf6/event/url.js now..

Comment 5

[Karl Dubost💡 :karlcow]

I have contacted Apple.

Comment 6

[Karl Dubost💡 :karlcow]

Apple:

> I can confirm this issue. This page should never load in HTTPS 
> only HTTP. Apparently there’s a client side redirect in the page 
> that I assume it’s failing sometimes since somebody in your team 
> reported the error.
>
> I will file this issue internally for us to investigate/resolve.

Comment 7

[Karl Dubost💡 :karlcow]

See also https://webcompat.com/issues/66

Comment 8

[Karl Dubost💡 :karlcow]

This event doesn't exist anymore.
http://www.apple.com/apple-events/june-2013/

Looking at http://www.apple.com/apple-events/june-2014/
It doesn't seem there is any issue with mixed content anymore.


Closing as FIXED.