892818 - recaptcha on "Violating Website Report" page is busted

Status: VERIFIED FIXED

(www.mozilla.org :: General, defect, P2)

Description

[Will Kahn-Greene [:willkg] ET needinfo? me]

The captcha for the form on https://www.mozilla.org/en-US/legal/fraud-report/ isn't showing up and so the form can never be submitted.

STR:

1. Go to https://www.mozilla.org/en-US/legal/fraud-report/
2. Fill in the form
3. Get down to the "Are you human?" section
4. ?

In the Console is this message:

[21:25:46.039] Blocked loading mixed active content "http://api.recaptcha.net/challenge?k=6LeJ_8oSAAAAAE0jFdqJ1SOtvKFwSjzd4cSTf5No" @ https://www.mozilla.org/en-US/legal/fraud-report/

I'm using Firefox Nightly (25.0a1 2013-07-11), however this issue was reported on SUMO earlier:

https://support.mozilla.org/en-US/forums/contributors/709465#post-53270

Comment 2

[Tanvi Vyas[:tanvi]]

recaptcha doesn't seem to have an https version (invalid cert), so I'm not sure how to fix this.  Use another captcha provider?  Contact recaptcha and see if they can get a valid cert?

Comment 3

[Logan Rosen [:Logan]]

"In order to avoid getting browser warnings when you use reCAPTCHA on an SSL site, you should replace http://www.google.com/recaptcha/api with https://www.google.com/recaptcha/api when you request a challenge."

More on the below page.

[1] https://developers.google.com/recaptcha/docs/tips

Comment 4

[Kohei Yoshino [:kohei]]

I already have a patch in Bug 798611.