insecure img src in main.html
Bug #725220 reported by
Mark Foster
This bug affects 1 person
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| nagios3 (Ubuntu) |
Triaged
|
Undecided
|
Unassigned | ||
Bug Description
Binary package hint: nagios3
File from nagios3-cgi: /usr/share/
containts an insecure img src from
http://
NOTE: Everything else on that main.html page is local relative URL thus agnostic to http or https.
Thus when accessing nagios under https, the site is compromised since most browser don't like the one insecure image src.
Please remove the link or pull it into the nagios package as a local resource and change the img src to also be relative.
Revision history for this message
| Mark Foster (fostermarkd) wrote | #1 |
Revision history for this message
| Marc Deslauriers (mdeslaur) wrote | #2 |
| visibility: | private → public |
| security vulnerability: | yes → no |
Revision history for this message
| Mark Foster (fostermarkd) wrote | #3 |
Revision history for this message
| Mark Foster (fostermarkd) wrote | #4 |
| Changed in nagios3 (Ubuntu): | |
| status: | New → Confirmed |
| status: | Confirmed → Triaged |
To post a comment you must log in.
Thanks for reporting this issue. This is a change that need to happen with the upstream Nagios project. Could you please file a bug with the upstream Nagios project, and link the bug here. Thanks.