863054 - Soundcloud API mixed content

Status: RESOLVED FIXED

(Webmaker Graveyard :: Popcorn Maker, defect)

Description

[Bobby Richter [:secretrobotron]]

Try using http://soundcloud.com/hizzlecrift/daft-punk-get-lucky-with-intro as a media source in Nightly.

No errors, but no soundcloud object on the page either (reported by Scott, so it might be shaky evidence, really).

Maybe mixed-content problems?

Comment 1

[Scott [:thecount] Downe]

Yup, def mixed content problems.

http://blog.mozilla.org/tanvi/2013/04/10/mixed-content-blocking-enabled-in-firefox-23/

The little mixed content shield does show up, and clicking it and letting it happen fixes the problem.

Comment 2

[Jon Buckley]

I did some more digging, and isolated it to the SC.get( "/resolve" ) call in the soundcloud wrapper. I setup a test page at https://jbuck.ca:4433/soundcloud.html which recreates the same error on Firefox Nightly. I pinged Paul Osman on twitter about this issue, and pointed at my test page. This can really only be fixed by SoundCloud since it's internal to https://connect.soundcloud.com/sdk.js .

Comment 3

[Mike Beltzner [:beltzner, not reading bugmail]]

Any progress update?

Comment 4

[Jon Buckley [:jbuck]]

Nah, just re-tested with my example and it's hitting the mixed content blocker. I pinged Paul Osman again, and I guess we'll just have to wait and see!

Comment 5

[Brian Carpenter [:geeknik]]

When I go to Soundcloud, Firefox Nightly is trying to play the sound out of the wrong device instead of using the default device configured in Windows. No other website plays audio out of the wrong device (Pandora, Spotify, YouTube all work with zero issues). IE 11 Preview, Chrome 29 Dev both work just fine w/ Soundcloud, so it doesn't appear to be a Windows issue. I don't see a mixed content warning icon when I visit. Same thing happens in Safe Mode.

Comment 6

[Jon Buckley [:jbuck]]

That sounds like a different issue from our bug here, where the the SoundCloud API doesn't work on an https site. Could you file a new bug with your issue?

Comment 7

[Brett Gaylor [:brett]]

Is this still happening?

Comment 8

[Jon Buckley [:jbuck]]

Yep, still happening: https://jake.makes.org/popcorn/16q2

Comment 9

[Tanvi Vyas[:tanvi]]

Which mozilla affiliated sites does this affect?  Is SoundCloud used on webmaker?

Comment 10

[Tanvi Vyas[:tanvi]]

Blocked content:

Blocked loading mixed active content "http://api.soundcloud.com/resolve?url=https%3A%2F%2Fsoundcloud.com%2Fmacklemore%2Fmacklemore-x-ryan-lewis-cant&client_id=YOUR_CLIENT_ID&format=json&_status_code_map[302]=200" @ https://connect.soundcloud.com/sdk.js:1

It is not blocked in chrome or chrome canary (chrome doesn't block XHR yet, so perhaps this is an xhr request).  Haven't tested IE.

Comment 11

[Brian Smith (:briansmith, :bsmith, use NEEDINFO?)]

(In reply to Tanvi Vyas [:tanvi] from comment #10)
> It is not blocked in chrome or chrome canary (chrome doesn't block XHR yet,
> so perhaps this is an xhr request).  Haven't tested IE.

I verified that the sound is blocked in IE10 too.

Comment 12

[Jon Buckley [:jbuck]]

Yeah, Webmaker uses SoundCloud. That test page I setup just demonstrates the failing API call in a less noisy fashion.

Comment 13

[Tanvi Vyas[:tanvi]]

Do we have a SoundCloud contact?

Comment 14

[Brian Carpenter [:geeknik]]

(In reply to Tanvi Vyas [:tanvi] from comment #13)
> Do we have a SoundCloud contact?

I pinged their Support Team and their CEO on Twitter with a link back to this bug.

Comment 15

[Lukas Blakk [:lsblakk] use ?needinfo]

I emailed Paul Osman who works at Soundcloud and should know who to get on this.

Comment 16

[Ben (:bensternthal)]

This looks like a 3rd party issue. Can I untrack this from "mozorg-mixedcontent"

Comment 17

[Tanvi Vyas[:tanvi]]

(In reply to Jon Buckley [:jbuck] from comment #12)
> Yeah, Webmaker uses SoundCloud. That test page I setup just demonstrates the
> failing API call in a less noisy fashion.

Per comment 12, this is an issue for webmaker, and hence is blocking both the Mozilla Affiliated and non-mozilla Mixed Content tracking bugs.

Comment 18

[Adam Muntner [:adamm] (use NEEDINFO)]

Brian/lsblakk, did you ever hear back from Soundcloud?

Comment 19

[Brian Carpenter [:geeknik]]

(In reply to Adam Muntner :adamm from comment #18)
> Brian/lsblakk, did you ever hear back from Soundcloud?

Negative. Nothing heard as a result of my Twitter messages, so I just sent them an email via http://help.soundcloud.com/customer/portal/emails/new with a link to this bug. I'll let you know if I hear back from them unless they show up here first.

Comment 20

[Paul Osman]

(In reply to Adam Muntner :adamm from comment #18)
> Brian/lsblakk, did you ever hear back from Soundcloud?

This should be fixed now. Please retry the test case: https://jbuck.ca:4433/soundcloud.html

The JavaScript SDK now uses window.location.protocol, which should fix the mixed-content warnings.

Comment 21

[Lukas Blakk [:lsblakk] use ?needinfo]

Thank you Paul!  Let's get this verified and updated to RESOLVED if all's well now.

Comment 22

[Jon Buckley [:jbuck]]

The test case is working, and I can use Soundcloud with Popcorn Maker in Nightly: https://jonatmozilla.makes.org/popcorn/19lj