Closed Bug 877761 Opened 7 years ago Closed 4 years ago

https://www.cmbchina.com/ does not work properly because of mixed content blocking

Categories

(Web Compatibility :: Desktop, defect, major)

defect
Not set
major

Tracking

(Not tracked)

RESOLVED WORKSFORME

People

(Reporter: mwobensmith, Unassigned)

References

(Blocks 1 open bug, )

Details

(Whiteboard: [mcb-chrome30+][mcb-ie][contactready][country-cn])

Attachments

(1 file)

Mixed content blocking is a feature that prevents insecure elements on secure pages from loading. In Firefox 23, this feature will default to blocking "active" insecure content, which may break some web sites. 

More information on Firefox's Mixed Content Blocker is below: 
http://blog.mozilla.org/tanvi/2013/04/10/mixed-content-blocking-enabled-in-firefox-23/

The security feature is currently breaking the HTTPS version of www.cmbchina.com. It also appears to be functioning incorrectly in Chrome 26 and IE10.

https://www.cmbchina.com/ should render and function like http://www.cmbchina.com/, but it doesn't because some HTTP resource(s) are not loaded.  Here is a list of the active, HTTP resources that were blocked: 

Blocked loading mixed active content "http://branch.cmbchina.com/stockinfo.htm" @ https://www.cmbchina.com/
Blocked loading mixed active content "http://vip.cmbchina.com/vipdefault.aspx" @ https://www.cmbchina.com/
Correction: 
"It also appears to be functioning incorrectly in Chrome 26 and IE10."

Should read:
"It also appears to be functioning incorrectly in IE10."
Whiteboard: [mcb-chrome29+][mcb-ie]
Whiteboard: [mcb-chrome29+][mcb-ie] → [mcb-chrome30+][mcb-ie]
I don't see any such error in the error console now (it's supposed to show up there, right?)
(In reply to Hallvord R. M. Steen from comment #2)
> I don't see any such error in the error console now (it's supposed to show
> up there, right?)

Yes, blocked Mixed Content shows up in the Security pane of the Web Console in Firefox 23+.  I still see the blocked messages:

Blocked loading mixed active content "http://branch.cmbchina.com/stockinfo.htm" @ https://www.cmbchina.com/
Blocked loading mixed active content "http://vip.cmbchina.com/vipdefault.aspx" @ https://www.cmbchina.com/
Whiteboard: [mcb-chrome30+][mcb-ie] → [mcb-chrome30+][mcb-ie][contactready][country-cn]
Attached image mixed-content.png
Screenshot in the console of some of the mixed content issues.
All of them are related to images.
The site needs to be contacted to inform about the mixed content policy.
Component: Chinese-Traditional → Desktop
See Also: → 1081239
Seems to work now
Status: NEW → RESOLVED
Closed: 4 years ago
Resolution: --- → WORKSFORME
Product: Tech Evangelism → Web Compatibility
You need to log in before you can comment on or make changes to this bug.