https://www.flickr.com/ - mixed active content (script) is blocked

RESOLVED WORKSFORME

Status

RESOLVED WORKSFORME
5 years ago
3 years ago

People

(Reporter: jruderman, Unassigned)

Tracking

(Blocks: 1 bug)

Details

(Whiteboard: [mcb-ie][mcb-chrome][contactready], URL)

(Reporter)

Description

5 years ago
1. https://www.flickr.com/photos/14725550@N04/sets/72157634499616266/
2. Hover over the "See more" in the description at the top

Result: nothing happens

Expected: tooltip with expanded description

I suspect this is because several scripts from http://yui.yahooapis.com/ are blocked on this https page.
(Reporter)

Comment 1

5 years ago
I don't know how common it is to stumble on https flickr URLs.  I got there from Ben Francis's tweet: https://twitter.com/bfrancis/status/354181324426326016
(Reporter)

Comment 2

5 years ago
I sent flickr a note using https://www.flickr.com/help/with/other/.  Hopefully their support staff knows a bug report when they see one.

Comment 3

5 years ago
https://yui.yahooapis.com uses an invalid cert, so they woudl have to update the cert and the links in the html.  I will send this over to a few yahoo security contacts.


Blocked loading mixed active content "http://yui.yahooapis.com/combo?3.7.3/build/oop/oop-min.js&3.7.3/build/attribute-core/attribute-core-min.js&3.7.3/build/base-core/base-core-min.js&3.7.3/build/event-custom-base/event-custom-base-min.js&3.7.3/build/event-custom-complex/event-custom-complex-min.js&3.7.3/build/attribute-events/attribute-events-min.js&3.7.3/build/attribute-extras/attribute-extras-min.js&3.7.3/build/attribute-base/attribute-base-min.js&3.7.3/build/base-base/base-base-min.js&3.7.3/build/pluginhost-base/pluginhost-base-min.js&3.7.3/build/pluginhost-config/pluginhost-config-min.js&3.7.3/build/base-pluginhost/base-pluginhost-min.js&3.7.3/build/base-build/base-build-min.js" @ https://s.yimg.com/pw/combo/1/3.7.3?j/yui/3.7.3/yui/yui-.E.A.v25Pmk&j/yui/3.7.3/.FN/.FN-.E.A.v25Pmk:7

Blocked loading mixed active content "http://yui.yahooapis.com/combo?3.7.3/build/substitute/substitute-min.js&3.7.3/build/plugin/plugin-min.js&3.7.3/build/event-simulate/event-simulate-min.js&3.7.3/build/async-queue/async-queue-min.js&3.7.3/build/gesture-simulate/gesture-simulate-min.js&3.7.3/build/node-event-simulate/node-event-simulate-min.js&3.7.3/build/node-focusmanager/node-focusmanager-min.js" @ https://s.yimg.com/pw/combo/1/3.7.3?j/yui/3.7.3/yui/yui-.E.A.v25Pmk&j/yui/3.7.3/.FN/.FN-.E.A.v25Pmk:7

Blocked loading mixed active content "http://yui.yahooapis.com/combo?3.7.3/build/plugin/plugin-min.js&3.7.3/build/node-focusmanager/node-focusmanager-min.js" @ https://s.yimg.com/pw/combo/1/3.7.3?j/yui/3.7.3/yui/yui-.E.A.v25Pmk&j/yui/3.7.3/.FN/.FN-.E.A.v25Pmk:7

Comment 4

5 years ago
Also got a report in bug 897064 for a similar flickr issue.  Marking that bug as a dup of this one and adding the relevant info:

(In reply to Chris Peterson (:cpeterson) from comment #0)
> STR:
> 1. Load
> https://secure.flickr.com/photos/hubertgajewski/sets/72157634726182047/
> 2. Scroll to the bottom of the page
> 
> RESULT:
> The photos "above the fold" load as expected, but the photos below the fold
> never finish loading. Flickr's "Fetching more photos..." loading message is
> never dismissed.


Blocked loading mixed active content "http://yui.yahooapis.com/combo?3.7.3/build/oop/oop-min.js&3.7.3/build/attribute-core/attribute-core-min.js&3.7.3/build/base-core/base-core-min.js&3.7.3/build/event-custom-base/event-custom-base-min.js&3.7.3/build/event-custom-complex/event-custom-complex-min.js&3.7.3/build/attribute-events/attribute-events-min.js&3.7.3/build/attribute-extras/attribute-extras-min.js&3.7.3/build/attribute-base/attribute-base-min.js&3.7.3/build/base-base/base-base-min.js&3.7.3/build/pluginhost-base/pluginhost-base-min.js&3.7.3/build/pluginhost-config/pluginhost-config-min.js&3.7.3/build/base-pluginhost/base-pluginhost-min.js&3.7.3/build/base-build/base-build-min.js" @ https://s.yimg.com/pw/combo/1/3.7.3?j/yui/3.7.3/yui/yui-.E.A.v25Pmk&j/yui/3.7.3/.FN/.FN-.E.A.v25Pmk:7

Blocked loading mixed active content "http://yui.yahooapis.com/combo?3.7.3/build/substitute/substitute-min.js&3.7.3/build/plugin/plugin-min.js&3.7.3/build/event-simulate/event-simulate-min.js&3.7.3/build/async-queue/async-queue-min.js&3.7.3/build/gesture-simulate/gesture-simulate-min.js&3.7.3/build/node-event-simulate/node-event-simulate-min.js&3.7.3/build/node-focusmanager/node-focusmanager-min.js" @ https://s.yimg.com/pw/combo/1/3.7.3?j/yui/3.7.3/yui/yui-.E.A.v25Pmk&j/yui/3.7.3/.FN/.FN-.E.A.v25Pmk:7

Blocked loading mixed active content "http://yui.yahooapis.com/combo?3.7.3/build/plugin/plugin-min.js&3.7.3/build/node-focusmanager/node-focusmanager-min.js" @ https://s.yimg.com/pw/combo/1/3.7.3?j/yui/3.7.3/yui/yui-.E.A.v25Pmk&j/yui/3.7.3/.FN/.FN-.E.A.v25Pmk:7

Updated

5 years ago
Duplicate of this bug: 897064

Comment 6

5 years ago
Matt, can you try both of these (comment 0 and comment 4) out on IE?  Thanks!
Whiteboard: [mcb-ie?]
Both URLs cause mixed content warnings in IE10.
Whiteboard: [mcb-ie?] → [mcb-ie]

Comment 8

5 years ago
They also both cause Mixed Content warnings in chrome, but for some reason, the functionality isn't broken in Chrome.  Which makes me think flickr has implemented Chrome specific code.
Whiteboard: [mcb-ie] → [mcb-ie][mcb-chrome]

Comment 9

5 years ago
The bug still persists. It is really annoying!
(Reporter)

Comment 10

5 years ago
This is a bug in flickr. Please contact them :)

Comment 11

5 years ago
Hi, it is still not clear for me, as I have manually added the expired certificate to firefox, and why it still refuses to work?
(In reply to persona from comment #11)
> Hi, it is still not clear for me, as I have manually added the expired
> certificate to firefox, and why it still refuses to work?

The problem is not that whether a certificate has expired. The problem is that Flickr is loading some page elements using HTTP from a web page that was loaded using HTTPS.

Comment 13

5 years ago
Thanks, Chris - now I can understand. I will try to report it to flickr.

Updated

5 years ago
Whiteboard: [mcb-ie][mcb-chrome] → [mcb-ie][mcb-chrome][contactready]

Updated

5 years ago
OS: Mac OS X → All
Can someone verify if this is fixed? I'm not able to reproduce in FF29 or Chrome 34.
Works for me with Nightly 32.
Status: NEW → RESOLVED
Last Resolved: 4 years ago
status-firefox29: --- → verified
status-firefox32: --- → verified
Hardware: x86 → All
Resolution: --- → WORKSFORME
Product: Tech Evangelism → Tech Evangelism Graveyard
You need to log in before you can comment on or make changes to this bug.