921759 - http://www.stroke.org.uk mixed content blocker problem with the sites registration procedure

Status: RESOLVED WORKSFORME

(Tech Evangelism Graveyard :: English Other, defect)

Description

[John Hesling [:John99] (NeedInfo me)]

The main site is http://www.stroke.org.uk
The site belongs to a registered Charity,and most content is available without signing in.

To post an their support forum http://www.stroke.org.uk/talkstroke it is necessary to register and login.The registration link will be http://www.stroke.org.uk/user 

Then https://www.stroke.org.uk/user/register at which point MCB becomes an issue.

There are security features and a *captcha* Clicking the MCB shield causes  a page reload and generates an error message that the code used is for one off use only.  I gave up and registered with Google Chrome. Chrome also had a MCB shield but did not result in error messages.

It may be possible to register, but it is certainly possible registration attempts with Firefox will fail. I did not try repeatedly to test this as I was concerned I would be blocked for attempting to misuse the site. 

It may also be worth testing the replacement password feature "Request new password" https://www.stroke.org.uk/user/password

Comment 1

[Gingerbread Man]

(In reply to John Hesling [:John99] from comment #0)
> Then https://www.stroke.org.uk/user/register at which point MCB becomes an issue.

I don't see anything related to logging in being blocked. The Web Console shows only a social sharing button being blocked:

Blocked loading mixed active content "http://s7.addthis.com/js/250/addthis_widget.js#pubid=xa-4fb10dad31ce3898?_=1399456035575" [Learn More] js_b69fed75f9cf232899404a4f0b0e58fe.js:12

How does the problem manifest itself? Is it necessary to submit information in the form on the page in order to see the problem?

Have you tried contacting the site owners about the problem? That's usually the best way to get site problems fixed.

> Clicking the MCB shield causes a page reload and generates an error message
> that the code used is for one off use only.

Can you clarify what you mean? I see no warning about "one-off use" after clicking the shield in the address bar, then the dropdown marker, then Disable Protection on This Page.

Comment 2

[John Hesling [:John99] (NeedInfo me)]

Thanks for looking at this. Apparently the issues are resolved so can be cleared WorksForMe or Invalid

From the web console recently I noted it included
"http://www.stroke.org.uk/index.php?q=image_captcha/215626/1401058639" Flagged as "[Mixed Content]"
But I could see the on screen captcha image that must be identified 
(Currently Inspector shows that on webpage element as https://www.stroke.org.uk/image_captcha/215626/1401058639 )

I just tried now to register on the site, but using dummy information; and the process apparently worked, as it replied the details were accepted and an email would be sent to me. http://www.stroke.org.uk/index.php?q=talkstroke/thanks-registering


> Have you tried contacting the site owners about the problem? That's usually the best way to get site 
> problems fixed.

At the time of this bug filing when I used the site even a search that did not require the user to be logged in was not working to filter results correctly. We obtained the information by telephone and reported the MCB related issue. I have not had cause to use the site since. Trying that search option now it works as expected returning expected results.

Trying to simulate a new registration also works as mentioned above. 
The mcb shield displays but does not seem to cause issues; other than, as you said; the social share button being blocked.