886592 - https://www.lexisnexis.com/en-us/home.page missing search box because of mixed content blocking

Status: RESOLVED FIXED

(Tech Evangelism Graveyard :: English US, defect)

Description

[Tanvi Vyas[:tanvi]]

Mixed content blocking is a feature that prevents insecure elements on secure pages from loading. In Firefox 23, this feature will default to blocking "active" insecure content, which may break some web sites. 

More information on Firefox's Mixed Content Blocker is below: 
http://blog.mozilla.org/tanvi/2013/04/10/mixed-content-blocking-enabled-in-firefox-23/

The security feature is currently breaking the HTTPS version of https://www.lexisnexis.com/en-us/home.page (the search box on the top right is missing) on Firefox 23+ because of HTTP javascript and HTTP css. The same issue exists on Chrome (and also probably IE, though I haven't tested that).

Here is a list of the active, HTTP resources that were blocked: 

Blocked loading mixed active content "http://www.google.com/jsapi" @ https://www.lexisnexis.com/en-us/home.page
Blocked loading mixed active content "http://www.google.com/cse/style/look/default.css" @ https://www.lexisnexis.com/en-us/home.page
Blocked loading mixed active content "http://ajax.googleapis.com/ajax/libs/jquery/1.5.1/jquery.min.js" @ https://www.lexisnexis.com/en-us/home.page

The ssl versions of these all exist, so you simply  have to change the "http://" google links to "https://" links.

Originally reported in bug 844556 - (In reply to therube from comment #25)
> https://www.lexisnexis.com/en-us/home.page
> 
> Upper right of the page, there should be a search box that fails to display.

Comment 1

[Bryan Quigley]

They redirect away from HTTPS now too.