889067 - https://www.newgrounds.com/ generates errors because of mixed content blocking

Status: RESOLVED WORKSFORME

(Web Compatibility :: Site Reports, defect)

Description

[Matt Wobensmith [:mwobensmith][:matt:]]

Mixed content blocking is a feature that prevents insecure elements on secure pages from loading. In Firefox 23, this feature will default to blocking "active" insecure content, which may break some web sites. 

More information on Firefox's Mixed Content Blocker is below: 
http://blog.mozilla.org/tanvi/2013/04/10/mixed-content-blocking-enabled-in-firefox-23/

The security feature is causing errors on the HTTPS version of newgrounds.com. It also causes errors on Chrome 26 and IE10.

https://www.newgrounds.com/ should render and function like http://www.newgrounds.com/, but it doesn't because some HTTP resource(s) are not loaded.  Here is a list of the active, HTTP resources that were blocked: 

Blocked loading mixed active content "http://js.ngfiles.com/jquery/jquery.flash.min_.js" @ https://www.newgrounds.com/
Blocked loading mixed active content "http://server.cpmstar.com/view.aspx?poolid=19331&multi=8&script=1" @ https://www.newgrounds.com/
Blocked loading mixed active content "http://server.cpmstar.com/cached/textadv2.js" @ https://www.newgrounds.com/
Blocked loading mixed active content "http://server.cpmstar.com/view.aspx?poolid=9497&script=1&rnd=593223" @ https://www.newgrounds.com/:103
Blocked loading mixed active content "http://server.cpmstar.com/view.aspx?poolid=55&script=1&rnd=738927" @ https://www.newgrounds.com/:1119
Blocked loading mixed active content "http://ads.newgrounds.com/cache/unit_26.html" @ https://ajax.googleapis.com/ajax/libs/jquery/1.8.2/jquery.min.js:2
Blocked loading mixed active content "http://ads.newgrounds.com/cache/unit_48.html" @ https://ajax.googleapis.com/ajax/libs/jquery/1.8.2/jquery.min.js:2
Blocked loading mixed active content "http://ads.newgrounds.com/cache/unit_23.html" @ https://ajax.googleapis.com/ajax/libs/jquery/1.8.2/jquery.min.js:2
Blocked loading mixed active content "http://www.newgrounds.com/ads/ad-support.html?product=Dr.%20Shroud%20DVD&url=http%3A//www.newgrounds.com/store/product/dr-shroud-dvd&price=%2418.00&image=http%3A//img.ngfiles.com/store/73_2.jpg" @ https://ajax.googleapis.com/ajax/libs/jquery/1.8.2/jquery.min.js:2
Blocked loading mixed active content "http://www.newgrounds.com/ads/ad-support.html?product=Red%20Baron%20Poster&url=http%3A//www.newgrounds.com/store/product/red-baron-poster&price=%245.00&image=http%3A//img.ngfiles.com/store/red-baron2.jpg" @ https://ajax.googleapis.com/ajax/libs/jquery/1.8.2/jquery.min.js:2
Blocked loading mixed active content "http://tag.crsspxl.com/s1.js?d=1370" @ https://www.newgrounds.com/:1664

Comment 1

[Karl Dubost💡 :karlcow]

Still going on

Comment 3

[Karl Dubost💡 :karlcow]

10:59:02.152 Blocked loading mixed active content “http://js.ngfiles.com/jquery/jquery.flash.min_.js” [Learn More] www.newgrounds.com
10:59:08.966 Blocked loading mixed active content “http://cdn.cpmstar.com/cached/js/textad_async_v100.pack.js” [Learn More] _web_content.js:2:344


This is still going on but it's less of an issue.

There are a couple of ads breaking such as

```
<div>
<div id="adcode-adunit1472435943" style="border:solid 1px #000; ">
<div><script language="Javascript">
var cpmstar_rnd=Math.round(Math.random()*999999);
var cpmstar_pid=48070;
document.writeln("<SCR"+"IPT language='Javascript' src='//server.cpmstar.com/view.aspx?poolid="+cpmstar_pid+"&script=1&rnd="+cpmstar_rnd+"'></SCR"+"IPT>");
</script><script language="Javascript" src="//server.cpmstar.com/view.aspx?poolid=48070&amp;script=1&amp;rnd=900234"></script><script type="text/javascript">
//20130426
var cpmstarfa13_allowplugin="Y";
var cpmstarfa13_flashurl="https://ssl.cdne.cpmstar.com/cached/creatives/537148/WoT_SummerBreak_300x250_l_Ja_140611.swf?clickTAG=http%3a%2f%2fserver.cpmstar.com%2fclick.aspx%3fpoolid%3d48070%26subpoolid%3d0%26campaignid%3d223046%26creativeid%3d537148%26url%3d";
var cpmstarfa13_width=300, width=300;
var cpmstarfa13_height=250, height=250;
var cpmstarfa13_imageurl="";
var cpmstarfa13_videourl="";
if(cpmstarfa13_videourl!="")cpmstarfa13_flashurl+="&videourl="+encodeURI(cpmstarfa13_videourl);
var cpmstarfa13_flashvars="";
if(cpmstarfa13_flashvars!="")cpmstarfa13_flashurl+="&"+cpmstarfa13_flashvars;
var cpmstarfa13_simpleclickurl="http://server.cpmstar.com/click.aspx?poolid=48070&subpoolid=0&campaignid=223046&creativeid=537148&url=";
var cpmstarfa13_pixelUrl = "";
if (cpmstarfa13_pixelUrl!="")document.write('<IMG SRC="'+cpmstarfa13_pixelUrl+'" width="0" height="0" border="0" style="position:absolute; visibility:hidden" />\n');
</script>
<script type="text/javascript" src="https://ssl.cdne.cpmstar.com/cached/js/flashadv13.pack.js">
</script><a href="http://server.cpmstar.com/click.aspx?poolid=48070&amp;subpoolid=0&amp;campaignid=223046&amp;creativeid=537148&amp;url=" target="_blank"><img src="" width="300" border="0" height="250"></a>
</div>
</div>
</div>
```


We get the same behavior in Opera Blink and Safari WebKit.

Contact information is at 
http://www.newgrounds.com/wiki/faq#wiki_toc_3

> You can also email the above information to support email address.

http://www.newgrounds.com/wiki/support-email-address


Switching to contactready, feel free to contact them.
When you do, please switch the bug to sitewait.

Comment 4

[sjw]

Seems to be fixed.