883692 - http://getpocket.com/ bookmarklet breaks with Mixed Content Blocker

Status: RESOLVED FIXED

(Tech Evangelism Graveyard :: English US, defect)

Description

[AJ Jordan [:strugee] (he/they)]

STR:
1. Go to http://getpocket.com/add
2. Install the bookmarklet (click "or get the bookmarklet" and drag +Pocket to bookmark bar)
3. Go to any webpage
4. Click on the bookmarklet in your bookmarks bar

Reproducible: always

Note that when you click the doorhanger and allow mixed content for the domain, the bookmarklet still doesn't load. Should probably be a followup

Comment 1

[Tanvi Vyas[:tanvi]]

Matt, can you check this out and see why the bookmarklet is not working?  Is it broken on just HTTPS pages (because the bookmarklet tries to load insecure content?) or also on HTTP pages (which would be odd)?

Also, can you check IE and Chrome?

Not sure why the bookmarklet doesn't load after you "disable protection".  Does the bookmarklet cause a whole page reload?  Mixed Content Blocker does not persist across refreshes/page reloads.

Comment 2

[Matt Wobensmith [:mwobensmith][:matt:]]

I'm unable to reproduce.

If there is a particular site that exhibits this behavior, please tell us.

I'm able to use the bookmarklet to save both HTTP and HTTPS sites with no mixed content warning.

Comment 3

[AJ Jordan [:strugee] (he/they)]

Whoops, shouldn't have said any page.
Seems to only happen with HTTPS pages. I'm looking at https://en.wikipedia.org/wiki/Dave_Winer and it still happens with today's Nightly (2013-6-24).
Note that I have HTTPS Everywhere installed and enabled.

Comment 4

[AJ Jordan [:strugee] (he/they)]

Filed 886663 as a followup to the second part of this report.

Comment 5

[Matt Wobensmith [:mwobensmith][:matt:]]

Seems to work fine on on FF m-c nightly and Chrome 26. I used the URL from comment 3 and others.

The functionality doesn't appear to work on IE10. Perhaps it's not supported there? I try to sign in, install via drag/drop, but nothing happens.

Comment 6

[Tanvi Vyas[:tanvi]]

(In reply to Matt Wobensmith from comment #5)
> Seems to work fine on on FF m-c nightly and Chrome 26. I used the URL from
> comment 3 and others.
> 

They seem to have updated their bookmarklet.  The script they source is now over https:
s.src='https://getpocket.com/b/r4.js?h='...

Getting an updated version of their bookmarklet should fix the issue.  Alex, can you try that?

Comment 7

[AJ Jordan [:strugee] (he/they)]

(In reply to Tanvi Vyas - out until 9/4 [:tanvi] from comment #6)
> (In reply to Matt Wobensmith from comment #5)
> > Seems to work fine on on FF m-c nightly and Chrome 26. I used the URL from
> > comment 3 and others.
> > 
> 
> They seem to have updated their bookmarklet.  The script they source is now
> over https:
> s.src='https://getpocket.com/b/r4.js?h='...
> 
> Getting an updated version of their bookmarklet should fix the issue.  Alex,
> can you try that?

Sorry, totally missed this question.
The updated bookmarklet fixes the issue for me.