node-solid-server icon indicating copy to clipboard operation
node-solid-server copied to clipboard

mixed content resource issue for https

Open kristophor opened this issue 7 years ago • 6 comments

Mixed Content: The page at 'https://krischen.solid.community/profile/card' was loaded over HTTPS, but requested an insecure resource 'http://xmlns.com/foaf/0.1/PersonalProfileDocument'. This request has been blocked; the content must be served over HTTPS.

kristophor avatar Nov 02 '18 14:11 kristophor

@kristophor can you provide a bit more detail? What are you doing when you run into this error? What browser are you using? etc?

justinwb avatar Nov 06 '18 18:11 justinwb

I am using chrome Version 70.0.3538.77 this is due to server referencing to non-https resources trigger security issue. i recommend change everything http to https to avoid mix content error.

screen shot 2018-11-06 at 1 17 58 pm

kristophor avatar Nov 06 '18 18:11 kristophor

Right, OK, so it happens in the edit profile mode.

We are aware that you can't mix content, it is just unclear to us what in the code would try to do that. I haven't been able to reproduce it om my POD.

But thanks, now I can target that more accurately!

kjetilk avatar Nov 06 '18 20:11 kjetilk

My question is - what part of the code is trying to actually fetch the foaf schema?

Cause what's erroring out is the request to http://xmlns.com/foaf/0.1/PersonalProfileDocument. What is requesting that url?

dmitrizagidulin avatar Nov 06 '18 20:11 dmitrizagidulin

i recommend change everything http to https to avoid mix content error.

So, for various historical and practical reasons, we can't change existing ontologies (like foaf) from http to https. Which means that the only thing that'll work is disabling the code that's trying to fetch them. Or have the code go through the cors proxy.

dmitrizagidulin avatar Nov 06 '18 21:11 dmitrizagidulin

My question is - what part of the code is trying to actually fetch the foaf schema?

Cause what's erroring out is the request to http://xmlns.com/foaf/0.1/PersonalProfileDocument. What is requesting that url?

Indeed, that's what we need to figure out.

kjetilk avatar Nov 06 '18 22:11 kjetilk