Page 1 of 1

loading scripts from unauthenticated sources?

PostPosted: Mon Nov 27, 2017 3:45 am
by bobjones
I noticed a red shield icon in chrome today on all of my tours.

Image

I have SSL on my site.

Giving me this error: This page is trying to load scripts from unauthenticated sources

Image

"Load unsafe scripts?"

What is this error?

I'm hosting tours for clients, I really need to sort this out before a client asks me about my "unsafe scripts".

Re: loading scripts from unauthenticated sources?

PostPosted: Mon Nov 27, 2017 4:32 pm
by Annis
Do you have a link to one of the tours that has this?

Re: loading scripts from unauthenticated sources?

PostPosted: Tue Nov 28, 2017 2:39 am
by bobjones

Re: loading scripts from unauthenticated sources?

PostPosted: Fri Dec 01, 2017 6:26 am
by 360-compunics-com-ni
This is what the Chrome-developer tools show when loading your page:
Mixed Content: The page at 'https://chrisogrady.com/virtual-tours/sky-premium/virtual-tour.html?s=pano28' was loaded over HTTPS, but requested an insecure script 'http://chrisogrady.com/'. This request has been blocked; the content must be served over HTTPS.

Re: loading scripts from unauthenticated sources?

PostPosted: Fri Dec 01, 2017 6:39 am
by bobjones
Thanks so much for your help!

I have no idea why it's requesting scripts from the non https domain.

I just had a look at the developer tools. Thanks for pointing that out!

Even the homepage author field is https.

I wish someone from Kolor could help with this. They tend to disappear in but reporting threads...

Re: loading scripts from unauthenticated sources?

PostPosted: Fri Dec 01, 2017 7:47 am
by 360-compunics-com-ni
I've had another look, the file "virtual-tour_messages_en.xml" contains the blocked http-request:
<data name="en_project_author_url"><![CDATA[http://chrisogrady.com]]></data>

Re: loading scripts from unauthenticated sources?

PostPosted: Fri Dec 01, 2017 8:34 am
by bobjones
Thanks for looking into this :-)

I have another tour right now with that line as HTTPS:

https://chrisogrady.com/virtual-tours/y ... -tour.html

<data name="en_project_author_url"><![CDATA[https://chrisogrady.com]]></data>

Re: loading scripts from unauthenticated sources?  [SOLVED]

PostPosted: Tue Dec 05, 2017 3:04 pm
by Annis
There are other links in your tour that are in http instead of https, check them all.
Visibly these are the links in the sidebar.

https.jpg


I'm really sorry for the delays in answering but these have been busy times and I have been off sick a lot.

Re: loading scripts from unauthenticated sources?

PostPosted: Tue Dec 05, 2017 3:23 pm
by bobjones
Thanks for catching that Annis.