Home → Problems →

Hoptoad producing SSL Mixed Content Warnings, even with Secure enabled

Admin Functions

• Remove

Robert Shedd

22 Dec, 2010 04:02 PM

In IE7, Hoptoad is producing SSL Mixed Content warnings. I think this is from Hoptoad's client side support. I see the JS is trying to detect the browser's protocol, but I see see Hoptoad being accessed over HTTP instead of HTTPS in the status bar.

I have also set the config.secure option as suggested in the KB (http://help.hoptoadapp.com/kb/api-2/ssl-support).

See attached screenshot. The address bar shows an HTTPS address, but the status bar shows Hoptoad being accessed over HTTP.

How can I resolve this?

• hoptoad_mixed_security_warning.PNG 72 KB

1. 2 Posted by Matt Jankowski on 23 Dec, 2010 02:02 AM

   

   Are you manually inserting the JS notififer code into your html pages, or just letting the HT notifier do it?

   Admin Functions

   • Split
   • Remove

2. 3 Posted by Robert Shedd on 31 Dec, 2010 07:06 PM

   

   Matt,
   I¹m letting Hoptoad insert the JavaScript.

   On 12/23/10 2:02 AM, "Matt Jankowski"
   <[email blocked]> wrote:

   Admin Functions

   • Split
   • Remove

3. 4 Posted by Jason Morrison on 04 Jan, 2011 02:46 PM

   

   Hi Robert,

   Thanks. I'm opening a bug ticket in our tracker. In the meantime, the bug appears to be on line 11 of http://hoptoadapp.com/javascripts/notifier.js (included in your pages automatically by the notifier plugin):

       var url     = 'http://' + host + '/notifier_api/v2/notices?data=' + xml;
   

   which should use the protocol (https vs http) specific in your Hoptoad configuration. If you like, you can manually include the JS in your app and change "http" to "https" here until we release a fix.

   We'll update this ticket once a fix is deployed.

   Thanks,
   -Jason

   Admin Functions

   • Split
   • Remove

4. 5 Posted by Robert Shedd on 06 Jan, 2011 12:30 PM

   

   Thanks. I've saved down a copy of the JS, made the fix locally, and manually
   implemented the notifier script. That fixed the issue for me - thanks for
   your help!

   When do you expect this fix to be incorporated into a future version of the
   gem?

   Thanks!

   On 1/4/11 2:46 PM, "Jason Morrison"
   <[email blocked]> wrote:

   Admin Functions

   • Split
   • Remove

5. 6 Posted by Harold Gimenez on 25 Apr, 2011 07:29 PM

   

   Just wanted to update here and say that a fix for this has been deployed. There's nothing you need to do on your end. The IE warnings caused by the notifier should be gone.

   Thanks for using Hoptoad!

   Admin Functions

   • Split
   • Remove

6. Harold Gimenez closed this discussion on 25 Apr, 2011 07:29 PM.

Comments are currently closed for this discussion. You can start a new one.