loading scripts from unauthenticated sources?   [SOLVED] - View the solution

This forum is fully dedicated to Panotour / Panotour Pro bug reports as well as feature discussion.
User avatar
bobjones
Member
 
Topic author
Posts: 154
Likes: 8 posts
Liked in: 8 posts
Joined: Tue Jun 03, 2014 3:37 am
Info

loading scripts from unauthenticated sources?

by bobjones » Mon Nov 27, 2017 3:45 am

I noticed a red shield icon in chrome today on all of my tours.

Image

I have SSL on my site.

Giving me this error: This page is trying to load scripts from unauthenticated sources

Image

"Load unsafe scripts?"

What is this error?

I'm hosting tours for clients, I really need to sort this out before a client asks me about my "unsafe scripts".

User avatar
Annis
Kolor Team
 
Posts: 6062
Likes: 801 posts
Liked in: 444 posts
Joined: Mon Aug 12, 2013 12:47 pm
Location: France
Info

Re: loading scripts from unauthenticated sources?

by Annis » Mon Nov 27, 2017 4:32 pm

Do you have a link to one of the tours that has this?

User avatar
bobjones
Member
 
Topic author
Posts: 154
Likes: 8 posts
Liked in: 8 posts
Joined: Tue Jun 03, 2014 3:37 am
Info

Re: loading scripts from unauthenticated sources?

by bobjones » Tue Nov 28, 2017 2:39 am


User avatar
360-compunics-com-ni
Member
 
Posts: 418
Likes: 15 posts
Liked in: 163 posts
Joined: Wed Dec 17, 2014 12:37 am
Location: León, Nicaragua
Info

Re: loading scripts from unauthenticated sources?

by 360-compunics-com-ni » Fri Dec 01, 2017 6:26 am

This is what the Chrome-developer tools show when loading your page:
Mixed Content: The page at 'https://chrisogrady.com/virtual-tours/sky-premium/virtual-tour.html?s=pano28' was loaded over HTTPS, but requested an insecure script 'http://chrisogrady.com/'. This request has been blocked; the content must be served over HTTPS.
Out now: DeviceCheck for PTP plugins! https://www.kolor.com/forum/viewtopic.php?f=40&t=37446

Want to know how clients use your tours? Google Analytics Track Events plugin: http://www.kolor.com/forum/viewtopic.php?f=40&t=34442

Add actions to your hotspots: Hotspot Actionlist plugin: http://www.kolor.com/forum/viewtopic.php?f=40&t=35829

User avatar
bobjones
Member
 
Topic author
Posts: 154
Likes: 8 posts
Liked in: 8 posts
Joined: Tue Jun 03, 2014 3:37 am
Info

Re: loading scripts from unauthenticated sources?

by bobjones » Fri Dec 01, 2017 6:39 am

Thanks so much for your help!

I have no idea why it's requesting scripts from the non https domain.

I just had a look at the developer tools. Thanks for pointing that out!

Even the homepage author field is https.

I wish someone from Kolor could help with this. They tend to disappear in but reporting threads...

User avatar
360-compunics-com-ni
Member
 
Posts: 418
Likes: 15 posts
Liked in: 163 posts
Joined: Wed Dec 17, 2014 12:37 am
Location: León, Nicaragua
Info

Re: loading scripts from unauthenticated sources?

by 360-compunics-com-ni » Fri Dec 01, 2017 7:47 am

I've had another look, the file "virtual-tour_messages_en.xml" contains the blocked http-request:
<data name="en_project_author_url"><![CDATA[http://chrisogrady.com]]></data>
Out now: DeviceCheck for PTP plugins! https://www.kolor.com/forum/viewtopic.php?f=40&t=37446

Want to know how clients use your tours? Google Analytics Track Events plugin: http://www.kolor.com/forum/viewtopic.php?f=40&t=34442

Add actions to your hotspots: Hotspot Actionlist plugin: http://www.kolor.com/forum/viewtopic.php?f=40&t=35829

User avatar
bobjones
Member
 
Topic author
Posts: 154
Likes: 8 posts
Liked in: 8 posts
Joined: Tue Jun 03, 2014 3:37 am
Info

Re: loading scripts from unauthenticated sources?

by bobjones » Fri Dec 01, 2017 8:34 am

Thanks for looking into this :-)

I have another tour right now with that line as HTTPS:

https://chrisogrady.com/virtual-tours/y ... -tour.html

<data name="en_project_author_url"><![CDATA[https://chrisogrady.com]]></data>

User avatar
Annis
Kolor Team
 
Posts: 6062
Likes: 801 posts
Liked in: 444 posts
Joined: Mon Aug 12, 2013 12:47 pm
Location: France
Info

Re: loading scripts from unauthenticated sources?  [SOLVED]

by Annis » Tue Dec 05, 2017 3:04 pm

There are other links in your tour that are in http instead of https, check them all.
Visibly these are the links in the sidebar.

https.jpg


I'm really sorry for the delays in answering but these have been busy times and I have been off sick a lot.

User avatar
bobjones
Member
 
Topic author
Posts: 154
Likes: 8 posts
Liked in: 8 posts
Joined: Tue Jun 03, 2014 3:37 am
Info

Re: loading scripts from unauthenticated sources?

by bobjones » Tue Dec 05, 2017 3:23 pm

Thanks for catching that Annis.

Annis likes this post.


Who is online

Users browsing this forum: No registered users and 2 guests

cron