889079 - https://www.bigfishgames.com/ does not work properly because of mixed content blocking

Status: RESOLVED WONTFIX

(Web Compatibility :: Site Reports, defect)

Description

[Gabriela [:gaby2300]]

Mixed content blocking is a feature that prevents insecure elements on secure pages from loading. In Firefox 23, this feature will default to blocking "active" insecure content, which may break some web sites. 

More information on Firefox's Mixed Content Blocker is below: 
http://blog.mozilla.org/tanvi/2013/04/10/mixed-content-blocking-enabled-in-firefox-23/

The security feature is currently breaking the HTTPS version of AFFECTED_SITE. 

https://AFFECTED_SITE should render and function like http://iAFFECTED_SITE, but it doesn't because some HTTP resource(s) are not loaded.  Here is a list of the active, HTTP resources that were blocked:

Comment 1

[Gabriela [:gaby2300]]

Web console errors

[17:46:28.897] Blocked loading mixed active content "http://cdn-assets.bigfishsites.com/RC-2745.20130625.2/global/css/bfg/screen/bfg_global_v2_default_en_output.css?build=" @ https://www.bigfishgames.com/download-games/search.html?search=dark%20parables
[17:46:28.898] Blocked loading mixed active content "http://cdn-assets.bigfishsites.com/RC-2745.20130625.2/bfg_web/css/bfg/en/screen/site_default_output.css?build=" @ https://www.bigfishgames.com/download-games/search.html?search=dark%20parables
[17:46:28.898] Blocked loading mixed active content "http://cdn-assets.bigfishsites.com/RC-2745.20130625.2/bfg_web/css/bfg/en/screen/download_output.css?build=" @ https://www.bigfishgames.com/download-games/search.html?search=dark%20parables
[17:46:29.298] Blocked loading mixed active content "http://cdn-assets.bigfishsites.com/RC-2745.20130625.2/global/javascript/webtrends_capi_3.1.2.js?build=" @ https://www.bigfishgames.com/download-games/search.html?search=dark%20parables
[17:46:29.298] Blocked loading mixed active content "http://cdn-assets.bigfishsites.com/RC-2745.20130625.2/bfg_web/javascript/bfg/en/screen/site_default_output.js?build=" @ https://www.bigfishgames.com/download-games/search.html?search=dark%20parables
[17:46:29.299] Blocked loading mixed active content "http://cdn-assets.bigfishsites.com/RC-2745.20130625.2/bfg_web/javascript/bfg/en/screen/alphalist_output.js?build=" @ https://www.bigfishgames.com/download-games/search.html?search=dark%20parables
[17:46:29.299] Blocked loading mixed active content "http://cdn-assets.bigfishsites.com/RC-2745.20130625.2/global/javascript/bfg_forms_v5.1.js?build=" @ https://www.bigfishgames.com/download-games/search.html?search=dark%20parables
[17:46:29.299] Blocked loading mixed active content "http://cdn-assets.bigfishsites.com/RC-2745.20130625.2/bfg_web/javascript/bfg/en/screen/search_results_output.js?build=" @ https://www.bigfishgames.com/download-games/search.html?search=dark%20parables

Comment 2

[Matt Wobensmith [:mwobensmith][:matt:]]

This issue affects the entire bigfishgames.com site, and also affects Chrome 26 plus IE10.

Comment 3

[Karl Dubost💡 :karlcow]

As of today. This is still the case.

          11:08:56.724 Blocked loading mixed active content “http://cdn-assets.bigfishsites.com/RC-7035.20160809.1/bfg_web_mvc/css/site_en.css”[Learn More]www.bigfishgames.com
11:08:56.724 Blocked loading mixed active content “http://cdn-assets.bigfishsites.com/RC-7035.20160809.1/bfg_web_mvc/css/home_en.css”[Learn More]www.bigfishgames.com
11:08:56.724 Blocked loading mixed active content “http://cdn-assets.bigfishsites.com/RC-7035.20160809.1/bfg_header/css/header_en.css”[Learn More]www.bigfishgames.com
11:08:56.724 Blocked loading mixed active content “http://cdn-assets.bigfishsites.com/RC-7035.20160809.1/bfg_footer/css/footer_en.css”[Learn More]www.bigfishgames.com
11:08:57.108 Blocked loading mixed active content “http://cdn-assets.bigfishsites.com/RC-7035.20160809.1/bfg_web_mvc/javascript/core.js”[Learn More]www.bigfishgames.com
11:08:57.108 Blocked loading mixed active content “http://cdn-assets.bigfishsites.com/RC-7035.20160809.1/bfg_web_mvc/javascript/home.js”[Learn More]www.bigfishgames.com
11:08:57.108 Blocked loading mixed active content “http://cdn-assets.bigfishsites.com/RC-7035.20160809.1/bfg_header/javascript/header.js”[Learn More]www.bigfishgames.com
11:08:57.108 Blocked loading mixed active content “http://cdn-assets.bigfishsites.com/current/bfg_susi/javascript/js_source/screen/salli/salli.js”[Learn More]www.bigfishgames.com

They seem to interact on twitter.
https://twitter.com/bigfishgames/with_replies

It is also possible to contact them through a form.
https://bigfishgames.custhelp.com/app/ask

I will add contactready keyword
Feel free to contact them
Once you do, please switch to sitewait

Comment 4

[Adam Stevenson [:adamopenweb]]

Completed the site form with details of this bug. Switching to sitewait.

Comment 5

[Adam Stevenson [:adamopenweb]]

Received a response that the https version is not intended to be used and is only in place for API requests. They do not link or advertise the secure routes. 

It appears they do not intend to fix this issue. I'm closing this as WONTFIX, if someone disagrees we can open it back up.

Comment 6

[Mike Taylor [:miketaylr]]

(it looks like they did end up fixing this)