Closed
Bug 881263
Opened 12 years ago
Closed 12 years ago
[API] Blocked loading mixed active content (HTTP request to http:// from https:// )
Categories
(Socorro :: Webapp, task)
Socorro
Webapp
Tracking
(Not tracked)
RESOLVED
FIXED
People
(Reporter: adrian, Assigned: peterbe)
Details
On the API page on production ( https://crash-stats-django.mozilla.org/api/ ), trying to query anything will raise an error:
[16:37:47.471] Blocked loading mixed active content "http://crash-stats-django.mozilla.org/api/Platforms/?pretty=print" @ https://crash-stats-django.mozilla.org/static/CACHE/js/b7b29bef31f0.js:3
The reason is that the page tries to query a non-secure URL (http://... ) from a secured page (https://... ). This makes me wonder why the URLs there are not relative (or perhaps they are? But then how come it misses the 's' of https? ).
This bug is currently marked as harmful until we resolve bug 881262.
| Assignee | ||
Updated•12 years ago
|
Assignee: nobody → peterbe
Comment 1•12 years ago
|
||
We have turned off access to the API until this is fixed, making it public.
Group: client-services-security
| Reporter | ||
Comment 2•12 years ago
|
||
Peter, this is resolved, right?
| Assignee | ||
Comment 3•12 years ago
|
||
It has indeed.
Status: NEW → RESOLVED
Closed: 12 years ago
Resolution: --- → FIXED
You need to log in
before you can comment on or make changes to this bug.
Description
•