Mixed-content warning on pages that use mapping.js
Bug #337807 reported by
Māris Fogels
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| Launchpad itself |
Fix Released
|
High
|
Curtis Hovey | ||
Bug Description
Any Launchpad page that has a Google map raises a "Mixed content" security warn.
This is because mapping.js is pulling in the YUI 3 substitute.js file over plain old HTTP.
Two fixes: bundle substitute.js into launchpad.js (it's small, at 616 bytes uncompressed), or rewrite mapping.js to not use the substitute.js file.
| Changed in launchpad-foundations: | |
| importance: | Undecided → High |
| status: | New → Triaged |
Revision history for this message
| Curtis Hovey (sinzui) wrote | #1 |
| Changed in launchpad-foundations: | |
| assignee: | nobody → sinzui |
| milestone: | none → 2.2.3 |
Revision history for this message
| Curtis Hovey (sinzui) wrote | #2 |
| Changed in launchpad-foundations: | |
| status: | Triaged → Fix Committed |
Revision history for this message
| Curtis Hovey (sinzui) wrote | #3 |
| Changed in launchpad-foundations: | |
| status: | Fix Committed → Fix Released |
To post a comment you must log in.
Per Francis, substitute.js will be bundled if it is explicitly added to main-template.pt.