890898 - https://www.flickr.com/ - mixed active content (script) is blocked

Status: RESOLVED WORKSFORME

(Tech Evangelism Graveyard :: English US, defect)

Description

[Jesse Ruderman]

1. https://www.flickr.com/photos/14725550@N04/sets/72157634499616266/
2. Hover over the "See more" in the description at the top

Result: nothing happens

Expected: tooltip with expanded description

I suspect this is because several scripts from http://yui.yahooapis.com/ are blocked on this https page.

Comment 1

[Jesse Ruderman]

I don't know how common it is to stumble on https flickr URLs.  I got there from Ben Francis's tweet: https://twitter.com/bfrancis/status/354181324426326016

Comment 2

[Jesse Ruderman]

I sent flickr a note using https://www.flickr.com/help/with/other/.  Hopefully their support staff knows a bug report when they see one.

Comment 3

[Tanvi Vyas[:tanvi]]

https://yui.yahooapis.com uses an invalid cert, so they woudl have to update the cert and the links in the html.  I will send this over to a few yahoo security contacts.


Blocked loading mixed active content "http://yui.yahooapis.com/combo?3.7.3/build/oop/oop-min.js&3.7.3/build/attribute-core/attribute-core-min.js&3.7.3/build/base-core/base-core-min.js&3.7.3/build/event-custom-base/event-custom-base-min.js&3.7.3/build/event-custom-complex/event-custom-complex-min.js&3.7.3/build/attribute-events/attribute-events-min.js&3.7.3/build/attribute-extras/attribute-extras-min.js&3.7.3/build/attribute-base/attribute-base-min.js&3.7.3/build/base-base/base-base-min.js&3.7.3/build/pluginhost-base/pluginhost-base-min.js&3.7.3/build/pluginhost-config/pluginhost-config-min.js&3.7.3/build/base-pluginhost/base-pluginhost-min.js&3.7.3/build/base-build/base-build-min.js" @ https://s.yimg.com/pw/combo/1/3.7.3?j/yui/3.7.3/yui/yui-.E.A.v25Pmk&j/yui/3.7.3/.FN/.FN-.E.A.v25Pmk:7

Blocked loading mixed active content "http://yui.yahooapis.com/combo?3.7.3/build/substitute/substitute-min.js&3.7.3/build/plugin/plugin-min.js&3.7.3/build/event-simulate/event-simulate-min.js&3.7.3/build/async-queue/async-queue-min.js&3.7.3/build/gesture-simulate/gesture-simulate-min.js&3.7.3/build/node-event-simulate/node-event-simulate-min.js&3.7.3/build/node-focusmanager/node-focusmanager-min.js" @ https://s.yimg.com/pw/combo/1/3.7.3?j/yui/3.7.3/yui/yui-.E.A.v25Pmk&j/yui/3.7.3/.FN/.FN-.E.A.v25Pmk:7

Blocked loading mixed active content "http://yui.yahooapis.com/combo?3.7.3/build/plugin/plugin-min.js&3.7.3/build/node-focusmanager/node-focusmanager-min.js" @ https://s.yimg.com/pw/combo/1/3.7.3?j/yui/3.7.3/yui/yui-.E.A.v25Pmk&j/yui/3.7.3/.FN/.FN-.E.A.v25Pmk:7

Comment 4

[Tanvi Vyas[:tanvi]]

Also got a report in bug 897064 for a similar flickr issue.  Marking that bug as a dup of this one and adding the relevant info:

(In reply to Chris Peterson (:cpeterson) from comment #0)
> STR:
> 1. Load
> https://secure.flickr.com/photos/hubertgajewski/sets/72157634726182047/
> 2. Scroll to the bottom of the page
> 
> RESULT:
> The photos "above the fold" load as expected, but the photos below the fold
> never finish loading. Flickr's "Fetching more photos..." loading message is
> never dismissed.


Blocked loading mixed active content "http://yui.yahooapis.com/combo?3.7.3/build/oop/oop-min.js&3.7.3/build/attribute-core/attribute-core-min.js&3.7.3/build/base-core/base-core-min.js&3.7.3/build/event-custom-base/event-custom-base-min.js&3.7.3/build/event-custom-complex/event-custom-complex-min.js&3.7.3/build/attribute-events/attribute-events-min.js&3.7.3/build/attribute-extras/attribute-extras-min.js&3.7.3/build/attribute-base/attribute-base-min.js&3.7.3/build/base-base/base-base-min.js&3.7.3/build/pluginhost-base/pluginhost-base-min.js&3.7.3/build/pluginhost-config/pluginhost-config-min.js&3.7.3/build/base-pluginhost/base-pluginhost-min.js&3.7.3/build/base-build/base-build-min.js" @ https://s.yimg.com/pw/combo/1/3.7.3?j/yui/3.7.3/yui/yui-.E.A.v25Pmk&j/yui/3.7.3/.FN/.FN-.E.A.v25Pmk:7

Blocked loading mixed active content "http://yui.yahooapis.com/combo?3.7.3/build/substitute/substitute-min.js&3.7.3/build/plugin/plugin-min.js&3.7.3/build/event-simulate/event-simulate-min.js&3.7.3/build/async-queue/async-queue-min.js&3.7.3/build/gesture-simulate/gesture-simulate-min.js&3.7.3/build/node-event-simulate/node-event-simulate-min.js&3.7.3/build/node-focusmanager/node-focusmanager-min.js" @ https://s.yimg.com/pw/combo/1/3.7.3?j/yui/3.7.3/yui/yui-.E.A.v25Pmk&j/yui/3.7.3/.FN/.FN-.E.A.v25Pmk:7

Blocked loading mixed active content "http://yui.yahooapis.com/combo?3.7.3/build/plugin/plugin-min.js&3.7.3/build/node-focusmanager/node-focusmanager-min.js" @ https://s.yimg.com/pw/combo/1/3.7.3?j/yui/3.7.3/yui/yui-.E.A.v25Pmk&j/yui/3.7.3/.FN/.FN-.E.A.v25Pmk:7

Comment 6

[Tanvi Vyas[:tanvi]]

Matt, can you try both of these (comment 0 and comment 4) out on IE?  Thanks!

Comment 7

[Matt Wobensmith [:mwobensmith][:matt:]]

Both URLs cause mixed content warnings in IE10.

Comment 8

[Tanvi Vyas[:tanvi]]

They also both cause Mixed Content warnings in chrome, but for some reason, the functionality isn't broken in Chrome.  Which makes me think flickr has implemented Chrome specific code.

Comment 9

[persona]

The bug still persists. It is really annoying!

Comment 10

[Jesse Ruderman]

This is a bug in flickr. Please contact them :)

Comment 11

[persona]

Hi, it is still not clear for me, as I have manually added the expired certificate to firefox, and why it still refuses to work?

Comment 12

[Chris Peterson [:cpeterson]]

(In reply to persona from comment #11)
> Hi, it is still not clear for me, as I have manually added the expired
> certificate to firefox, and why it still refuses to work?

The problem is not that whether a certificate has expired. The problem is that Flickr is loading some page elements using HTTP from a web page that was loaded using HTTPS.

Comment 13

[persona]

Thanks, Chris - now I can understand. I will try to report it to flickr.

Comment 14

[Adam Stevenson [:adamopenweb]]

Can someone verify if this is fixed? I'm not able to reproduce in FF29 or Chrome 34.

Comment 15

[Chris Peterson [:cpeterson]]

Works for me with Nightly 32.