Closed Bug 450071 Opened 17 years ago Closed 17 years ago

wiki.mozilla.org has some insecure content.

Categories

(mozilla.org Graveyard :: Server Operations, task)

Product:
mozilla.org Graveyard
Component:
Server Operations
Type:
task
Priority:
Not set
Severity:
critical

Tracking

(Not tracked)

Status:
RESOLVED FIXED

People

(Reporter: standard8, Assigned: oremj)

Details

This started happening within the last week or so. Whenever I access a page on wiki.mozilla.org (I am logged in), I get the following security alert: "You have requested an encrypted page that contains some unencrypted information. Information that you see or enter on this page could easily be read by a third party." Looking at the page info, it appears there are some images included from http://www.mozilla.org/images/ This is really annoying and makes me want to turn off that alert so that I can do some work (or just browse) without clicking ok every two minutes, however I don't want to do that as some day I might need to know about it... Please can we fix these images to point to a secure location.
When I moved wikimo to SSL-only last week, I changed the skins to pull from https://www.mozilla.org/ for CSS and images, and I can confirm that the master server is showing this change, but apparently https://wiki.mozilla.org/skins/cavendish/main.css is still showing http://www.mozilla.org/... for things. I cleared the NetScaler cache on this last week, too, so I don't think that's the issue. My guess is that we must have some stuck webhead git update cronjobs somewhere.
Assignee: nobody → server-ops
Component: *.mozilla.org → Server Operations
Product: Websites → mozilla.org
QA Contact: other-mozilla-org → mrz
Version: unspecified → other
Assignee: server-ops → oremj
Will someone please paste an example URL?
(In reply to comment #2) > Will someone please paste an example URL? There's one in comment 1. https://wiki.mozilla.org/skins/cavendish/main.css shouldn't have any occurrences of "http://" in it except for the comments at the top and a link selector.
This appears fixed.
Status: NEW → RESOLVED
Closed: 17 years ago
Resolution: --- → FIXED
verified fixed
Status: RESOLVED → VERIFIED
I'm still seeing this. Just noticed it while reading https://wiki.mozilla.org/Summit2008/Sessions/Proposals/Mozilla_Identity, so I checked https://wiki.mozilla.org/skins/cavendish/main.css, and I see http://... instead of https://...
Status: VERIFIED → REOPENED
Resolution: FIXED → ---
Fixed.
Status: REOPENED → RESOLVED
Closed: 17 years ago → 17 years ago
Resolution: --- → FIXED
Product: mozilla.org → mozilla.org Graveyard
You need to log in before you can comment on or make changes to this bug.