Openbravo Issue Tracking System - Openbravo ERP |
View Issue Details |
|
ID | Project | Category | View Status | Date Submitted | Last Update |
0031595 | Openbravo ERP | A. Platform | public | 2015-11-26 10:56 | 2015-11-27 09:00 |
|
Reporter | alostale | |
Assigned To | alostale | |
Priority | normal | Severity | trivial | Reproducibility | have not tried |
Status | closed | Resolution | fixed | |
Platform | | OS | 5 | OS Version | |
Product Version | | |
Target Version | | Fixed in Version | 3.0PR16Q1 | |
Merge Request Status | |
Review Assigned To | caristu |
OBNetwork customer | |
Web browser | |
Modules | Core |
Support ticket | |
Regression level | |
Regression date | |
Regression introduced in release | |
Regression introduced by commit | |
Triggers an Emergency Pack | No |
|
Summary | 0031595: Getting Started videos cannot be seen in non-SSL instance |
Description | Having an Openbravo instance served without SSL (http instead of https), links to "navigation video" and "guided video" fail to open.
|
Steps To Reproduce | 1. Log in an instance without SSL
2. Click "navigation video" and "guided video"
- UI doesn't do anything
- In developers tools can be seen:
Mixed Content: The page at 'https://butler.openbravo.com/web/static-content/en_US/gettingstarted/widget.html?appurl=http://lh:8080/openbravo/#' [^] was loaded over HTTPS, but requested an insecure resource 'http://lh:8080/openbravo/web/org.openbravo.client.myob/proxy.html?viewname= [^]…053330149502%26appurl%3Dhttp%253A%252F%252Flh%253A8080%252Fopenbravo%252F&'. This request has been blocked; the content must be served over HTTPS.
Note the same works in https connections (ie. https://livebuilds.openbravo.com/erp_pi_pgsq [^]) |
Proposed Solution | |
Additional Information | |
Tags | No tags attached. |
Relationships | related to | defect | 0030579 | | closed | platform | Browser loading static community branding twice because of missing character encoding in its html file |
|
Attached Files | |
|
Issue History |
Date Modified | Username | Field | Change |
2015-11-26 10:56 | alostale | New Issue | |
2015-11-26 10:56 | alostale | Assigned To | => platform |
2015-11-26 10:56 | alostale | Modules | => Core |
2015-11-26 10:56 | alostale | Triggers an Emergency Pack | => No |
2015-11-26 10:57 | alostale | Assigned To | platform => alostale |
2015-11-26 11:02 | alostale | Steps to Reproduce Updated | bug_revision_view_page.php?rev_id=10365#r10365 |
2015-11-26 11:06 | alostale | Relationship added | related to 0030579 |
2015-11-26 11:10 | hgbot | Checkin | |
2015-11-26 11:10 | hgbot | Note Added: 0082361 | |
2015-11-26 11:10 | hgbot | Status | new => resolved |
2015-11-26 11:10 | hgbot | Resolution | open => fixed |
2015-11-26 11:10 | hgbot | Fixed in SCM revision | => http://code.openbravo.com/erp/devel/pi/rev/2d31b78e38c9d3aa3864dc263d4d9ceff81f6bb3 [^] |
2015-11-26 11:12 | alostale | Review Assigned To | => caristu |
2015-11-26 11:16 | alostale | Note Added: 0082362 | |
2015-11-26 16:52 | hudsonbot | Checkin | |
2015-11-26 16:52 | hudsonbot | Note Added: 0082376 | |
2015-11-27 09:00 | caristu | Note Added: 0082394 | |
2015-11-27 09:00 | caristu | Status | resolved => closed |
2015-11-27 09:00 | caristu | Fixed in Version | => 3.0PR16Q1 |
Notes |
|
(0082361)
|
hgbot
|
2015-11-26 11:10
|
|
Repository: erp/devel/pi
Changeset: 2d31b78e38c9d3aa3864dc263d4d9ceff81f6bb3
Author: Asier Lostalé <asier.lostale <at> openbravo.com>
Date: Thu Nov 26 11:09:59 2015 +0100
URL: http://code.openbravo.com/erp/devel/pi/rev/2d31b78e38c9d3aa3864dc263d4d9ceff81f6bb3 [^]
fixed bug 31595: Getting Started videos cannot be seen in non-SSL instance
This was caused beacause the widget was served from butler server using always
a https request. This widget tries to load data from referrer url, in case this
is http, modern browsers don't allow it.
Fixed by replacing https://butler.operbravo.com [^] with //butler.opernbravo.com
which makes use of current protocol.
---
M modules/org.openbravo.client.myob/web/org.openbravo.client.myob/js/ob-getting-started-widget.js
---
|
|
|
|
fix tested both with http and https protocols |
|
|
|
|
|
|
Verified: videos can be seen with both http and https protocols |
|