Openbravo Issue Tracking System - Openbravo ERP
View Issue Details
0031595Openbravo ERPA. Platformpublic2015-11-26 10:562015-11-27 09:00
alostale 
alostale 
normaltrivialhave not tried
closedfixed 
5
 
3.0PR16Q1 
caristu
Core
No
0031595: Getting Started videos cannot be seen in non-SSL instance
Having an Openbravo instance served without SSL (http instead of https), links to "navigation video" and "guided video" fail to open.
1. Log in an instance without SSL
2. Click "navigation video" and "guided video"
  - UI doesn't do anything
  - In developers tools can be seen:
Mixed Content: The page at 'https://butler.openbravo.com/web/static-content/en_US/gettingstarted/widget.html?appurl=http://lh:8080/openbravo/#' [^] was loaded over HTTPS, but requested an insecure resource 'http://lh:8080/openbravo/web/org.openbravo.client.myob/proxy.html?viewname= [^]…053330149502%26appurl%3Dhttp%253A%252F%252Flh%253A8080%252Fopenbravo%252F&'. This request has been blocked; the content must be served over HTTPS.

Note the same works in https connections (ie. https://livebuilds.openbravo.com/erp_pi_pgsq [^])
No tags attached.
related to defect 0030579 closed platform Browser loading static community branding twice because of missing character encoding in its html file 
Issue History
2015-11-26 10:56alostaleNew Issue
2015-11-26 10:56alostaleAssigned To => platform
2015-11-26 10:56alostaleModules => Core
2015-11-26 10:56alostaleTriggers an Emergency Pack => No
2015-11-26 10:57alostaleAssigned Toplatform => alostale
2015-11-26 11:02alostaleSteps to Reproduce Updatedbug_revision_view_page.php?rev_id=10365#r10365
2015-11-26 11:06alostaleRelationship addedrelated to 0030579
2015-11-26 11:10hgbotCheckin
2015-11-26 11:10hgbotNote Added: 0082361
2015-11-26 11:10hgbotStatusnew => resolved
2015-11-26 11:10hgbotResolutionopen => fixed
2015-11-26 11:10hgbotFixed in SCM revision => http://code.openbravo.com/erp/devel/pi/rev/2d31b78e38c9d3aa3864dc263d4d9ceff81f6bb3 [^]
2015-11-26 11:12alostaleReview Assigned To => caristu
2015-11-26 11:16alostaleNote Added: 0082362
2015-11-26 16:52hudsonbotCheckin
2015-11-26 16:52hudsonbotNote Added: 0082376
2015-11-27 09:00caristuNote Added: 0082394
2015-11-27 09:00caristuStatusresolved => closed
2015-11-27 09:00caristuFixed in Version => 3.0PR16Q1

Notes
(0082361)
hgbot   
2015-11-26 11:10   
Repository: erp/devel/pi
Changeset: 2d31b78e38c9d3aa3864dc263d4d9ceff81f6bb3
Author: Asier Lostalé <asier.lostale <at> openbravo.com>
Date: Thu Nov 26 11:09:59 2015 +0100
URL: http://code.openbravo.com/erp/devel/pi/rev/2d31b78e38c9d3aa3864dc263d4d9ceff81f6bb3 [^]

fixed bug 31595: Getting Started videos cannot be seen in non-SSL instance

  This was caused beacause the widget was served from butler server using always
  a https request. This widget tries to load data from referrer url, in case this
  is http, modern browsers don't allow it.

  Fixed by replacing https://butler.operbravo.com [^] with //butler.opernbravo.com
  which makes use of current protocol.

---
M modules/org.openbravo.client.myob/web/org.openbravo.client.myob/js/ob-getting-started-widget.js
---
(0082362)
alostale   
2015-11-26 11:16   
fix tested both with http and https protocols
(0082376)
hudsonbot   
2015-11-26 16:52   
A changeset related to this issue has been promoted main and to the
Central Repository, after passing a series of tests.

Promotion changeset: https://code.openbravo.com/erp/devel/main/rev/21029fde2d45 [^]
Maturity status: Test
(0082394)
caristu   
2015-11-27 09:00   
Verified: videos can be seen with both http and https protocols