From bugzilla-daemon@bugs.koha-community.org Tue Oct 22 15:51:37 2019 From: bugzilla-daemon@bugs.koha-community.org To: koha-bugs@lists.koha-community.org Subject: [Koha-bugs] [Bug 23874] New: Advanced Editor is not loaded over HTTPS Date: Tue, 22 Oct 2019 13:51:36 +0000 Message-ID: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============8466640559883989938==" --===============8466640559883989938== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3D23874 Bug ID: 23874 Summary: Advanced Editor is not loaded over HTTPS Change sponsored?: --- Product: Koha Version: 19.05 Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Cataloging Assignee: koha-bugs@lists.koha-community.org Reporter: fraktik@gmail.com QA Contact: testopia@bugs.koha-community.org CC: m.de.rooy@rijksmuseum.nl Symptoms: Loading, please wait... Editor of record is visually loaded in background, but over it is big endless running circle with announcement: "Loading, please wait... Source of problem: The script is by default blocked by browsers because there is some hardlink to HTTP content. Another details: - This is related both to 18.05 and 19.05, Firefox and Chrome, Win10 and Ubuntu, and it's behaving practically same. - We have in general disabled (forwarded) all unsecured traffic to https at o= ur nginx rproxy server. Console output: Blocked loading mixed active content=20 =E2=80=9Chttp://demo.koha.cz/cgi-bin/koha/svc/cataloguing/framework?callback= =3Ddefine=E2=80=9D editor.pl The resource from=20 =E2=80=9Chttps://demo.koha.cz/cgi-bin/koha/svc/cataloguing/framework?framewor= kcode=3D&callback=3Ddefine=E2=80=9D was blocked due to MIME type (=E2=80=9Ctext/html=E2=80=9D) mismatch (X-Conten= t-Type-Options: nosniff). editor.pl