Anonymous | Login
Project:
RSS
  
News | My View | View Issues | Roadmap | Summary

View Issue DetailsJump to Notes ] Issue History ] Print ]
ID
0031595
TypeCategorySeverityReproducibilityDate SubmittedLast Update
defect[Openbravo ERP] A. Platformtrivialhave not tried2015-11-26 10:562015-11-27 09:00
ReporteralostaleView Statuspublic 
Assigned Toalostale 
PrioritynormalResolutionfixedFixed in Version3.0PR16Q1
StatusclosedFix in branchFixed in SCM revision2d31b78e38c9
ProjectionnoneETAnoneTarget Version
OSAnyDatabaseAnyJava version
OS VersionDatabase versionAnt version
Product VersionSCM revision 
Review Assigned Tocaristu
Web browser
ModulesCore
Regression level
Regression date
Regression introduced in release
Regression introduced by commit
Triggers an Emergency PackNo
Summary

0031595: Getting Started videos cannot be seen in non-SSL instance

DescriptionHaving an Openbravo instance served without SSL (http instead of https), links to "navigation video" and "guided video" fail to open.
Steps To Reproduce1. Log in an instance without SSL
2. Click "navigation video" and "guided video"
  - UI doesn't do anything
  - In developers tools can be seen:
Mixed Content: The page at 'https://butler.openbravo.com/web/static-content/en_US/gettingstarted/widget.html?appurl=http://lh:8080/openbravo/#' [^] was loaded over HTTPS, but requested an insecure resource 'http://lh:8080/openbravo/web/org.openbravo.client.myob/proxy.html?viewname= [^]…053330149502%26appurl%3Dhttp%253A%252F%252Flh%253A8080%252Fopenbravo%252F&'. This request has been blocked; the content must be served over HTTPS.

Note the same works in https connections (ie. https://livebuilds.openbravo.com/erp_pi_pgsq [^])
TagsNo tags attached.
Attached Files

- Relationships Relation Graph ] Dependency Graph ]
related to defect 0030579 closedplatform Browser loading static community branding twice because of missing character encoding in its html file 

-  Notes
(0082361)
hgbot (developer)
2015-11-26 11:10

Repository: erp/devel/pi
Changeset: 2d31b78e38c9d3aa3864dc263d4d9ceff81f6bb3
Author: Asier Lostalé <asier.lostale <at> openbravo.com>
Date: Thu Nov 26 11:09:59 2015 +0100
URL: http://code.openbravo.com/erp/devel/pi/rev/2d31b78e38c9d3aa3864dc263d4d9ceff81f6bb3 [^]

fixed bug 31595: Getting Started videos cannot be seen in non-SSL instance

  This was caused beacause the widget was served from butler server using always
  a https request. This widget tries to load data from referrer url, in case this
  is http, modern browsers don't allow it.

  Fixed by replacing https://butler.operbravo.com [^] with //butler.opernbravo.com
  which makes use of current protocol.

---
M modules/org.openbravo.client.myob/web/org.openbravo.client.myob/js/ob-getting-started-widget.js
---
(0082362)
alostale (manager)
2015-11-26 11:16

fix tested both with http and https protocols
(0082376)
hudsonbot (developer)
2015-11-26 16:52

A changeset related to this issue has been promoted main and to the
Central Repository, after passing a series of tests.

Promotion changeset: https://code.openbravo.com/erp/devel/main/rev/21029fde2d45 [^]
Maturity status: Test
(0082394)
caristu (developer)
2015-11-27 09:00

Verified: videos can be seen with both http and https protocols

- Issue History
Date Modified Username Field Change
2015-11-26 10:56 alostale New Issue
2015-11-26 10:56 alostale Assigned To => platform
2015-11-26 10:56 alostale Modules => Core
2015-11-26 10:56 alostale Triggers an Emergency Pack => No
2015-11-26 10:57 alostale Assigned To platform => alostale
2015-11-26 11:02 alostale Steps to Reproduce Updated View Revisions
2015-11-26 11:06 alostale Relationship added related to 0030579
2015-11-26 11:10 hgbot Checkin
2015-11-26 11:10 hgbot Note Added: 0082361
2015-11-26 11:10 hgbot Status new => resolved
2015-11-26 11:10 hgbot Resolution open => fixed
2015-11-26 11:10 hgbot Fixed in SCM revision => http://code.openbravo.com/erp/devel/pi/rev/2d31b78e38c9d3aa3864dc263d4d9ceff81f6bb3 [^]
2015-11-26 11:12 alostale Review Assigned To => caristu
2015-11-26 11:16 alostale Note Added: 0082362
2015-11-26 16:52 hudsonbot Checkin
2015-11-26 16:52 hudsonbot Note Added: 0082376
2015-11-27 09:00 caristu Note Added: 0082394
2015-11-27 09:00 caristu Status resolved => closed
2015-11-27 09:00 caristu Fixed in Version => 3.0PR16Q1


Copyright © 2000 - 2009 MantisBT Group
Powered by Mantis Bugtracker