Mixed Content error on Page Edit

Posted by Community Admin on 04-Aug-2018 17:07

Mixed Content error on Page Edit

All Replies

Posted by Community Admin on 24-Nov-2015 00:00

While on page edit with an image selector (mvc widget), selecting an image has no effect.  After bringing up the Dev Tools in Chrome, I see the below.

 

Mixed Content: The page at 'https://............' was loaded over HTTPS, but requested an insecure XMLHttpRequest endpoint 'http://........./Sitefinity/Services/Content/ImageService.svc/4218…inity.Libraries.Model.Image&provider=OpenAccessDataProvider&published=true'. This request has been blocked; the content must be served over HTTPS.

 

We are using SSL offloading but it doesn't appear that Sitefinity recognizes and forms the Url appropriately.  Any ideas?  Thank you.

Posted by Community Admin on 27-Nov-2015 00:00

Hi Joshua,

I would like to kindly suggest you to take a look to the following link for more details about how to configure SSL:

http://docs.sitefinity.com/administration-configure-ssl#configure-all-frontend-pages-to-require-ssl

Best Regards,
Junior Dominguez
Telerik

 
Do you want to have your say in the Sitefinity development roadmap? Do you want to know when a feature you requested is added or when a bug fixed? Explore the Telerik Sitefinity CMS Ideas&Feedback Portal and vote to affect the priority of the items
 

Posted by Community Admin on 27-Nov-2015 00:00

Junior, thanks for the reply; however, your suggestion doesn't work in my scenario.  I have checked the "Require SSL" property on certain pages for testing; however, when I tried to view the page I get an redirect loop error.  I had to uncheck it to get the page to show up again  on the front end.

 

Believe this is due to the fact that, to Sitefinity, the pages are coming in as http since the load balancer is handling the SSL.  So, Sitefinity is seeing this and trying to reroute to https, only to have the load balancer change it back to http when it hits Sitefinity.  I would have thought that enabling the SSL Offloading feature in Sitefinity took care of this; however, it does not appear to be doing anything.

 

I have confirmed that the proper headers are getting added to the Request by the load balancer before being sent to Sitefinity, so I am not sure what else it could be.

Posted by Community Admin on 03-Dec-2015 00:00

Hi Joshua,

Please note that if there is any widget (i.e: ContentBlock or custom widget) that has an image element added manually with absolute Url (probably added before setting the project to use HTTPS)  then you will need to change its src attribute manually or use relative path instead.  If the images were added using the Media Manager for instance they won't be affected since the ContentBlock will write a relative Url.

I have recorded this short video reproducing the problem.

Best Regards,
Junior Dominguez
Telerik

 
Do you want to have your say in the Sitefinity development roadmap? Do you want to know when a feature you requested is added or when a bug fixed? Explore the Telerik Sitefinity CMS Ideas&Feedback Portal and vote to affect the priority of the items
 

Posted by Community Admin on 03-Dec-2015 00:00

Junior,

 

There was no content on the page already and the image was added using the Image Manager via a Content Widget.  I have created a support ticket that has a video link attached if you want to check it out.  Thank you.

Posted by Community Admin on 17-Dec-2015 00:00

Hi Joshua,

The problem is caused by the Telerik.Sitefinity.Frontend.dll assembly which contains references to the http version of the cdn resource. I have logged this as a bug and have subscribed you to the notifications. I have also updated your Teleik points. 

the report can be found through the following public link of our Feedback Portal:

http://feedback.telerik.com/Project/153/Feedback/Details/178321-feather-contentblock-widget-designer-throws-mixed-http-and-https-content-warning

Please accept my apologies for the inconveniences it may have caused. 

Best Regards,
Junior Dominguez
Telerik

 
Do you want to have your say in the Sitefinity development roadmap? Do you want to know when a feature you requested is added or when a bug fixed? Explore the Telerik Sitefinity CMS Ideas&Feedback Portal and vote to affect the priority of the items
 

This thread is closed