895576 - https://www.kaskus.co.id/ does not work properly because of mixed content blocking

Status: RESOLVED FIXED

(Web Compatibility :: Site Reports, defect)

Description

[Tanvi Vyas[:tanvi]]

Mixed content blocking is a feature that prevents insecure elements on secure pages from loading. In Firefox 23, this feature will default to blocking "active" insecure content, which may break some web sites. 

More information on Firefox's Mixed Content Blocker is below: 
http://blog.mozilla.org/tanvi/2013/04/10/mixed-content-blocking-enabled-in-firefox-23/

The security feature is currently breaking the HTTPS version kaskus.co.id.  The following HTTP css and javascript content is Blocked:

Blocked loading mixed active content "http://cdn.kaskus.com/themes_2.0/stylesheets/style.css" @ https://www.kaskus.co.id/
Blocked loading mixed active content "http://cdn.kaskus.com/themes_2.0/javascript/hotkeys.js" @ https://www.kaskus.co.id/
Blocked loading mixed active content "http://cdn.kaskus.com/themes_2.0/javascript/landing-header.js" @ https://www.kaskus.co.id/
Blocked loading mixed active content "http://cdn.kaskus.com/themes_2.0/js/kaskus_md5.js" @ https://www.kaskus.co.id/
Blocked loading mixed active content "http://connect.facebook.net/en_US/all.js" @ https://www.kaskus.co.id/

This issue should also exist for your IE and Chrome users (although I have not confirmed on IE).

To fix this security issue, serve the content over HTTPS and change the link in the HTML source to point to the https:// version of the content.

This was originally reported by a user: https://blog.mozilla.org/tanvi/2013/04/10/mixed-content-blocking-enabled-in-firefox-23/#comment-199

Comment 1

[Tanvi Vyas[:tanvi]]

Matt, can you test this in IE?

Comment 2

[Matt Wobensmith [:mwobensmith][:matt:]]

IE10 is affected.

Comment 3

[Lukas Blakk [:lsblakk] use ?needinfo]

I submitted the link to this bug to their contact form.

Comment 4

[Karl Dubost💡 :karlcow]

This has been fixed.
Thanks.