search

cgeo / cgeo.github.io

Repository for hosting the FAQ and homepage of c:geo. This is **NOT** the right place to report bugs against the app.
http://cgeo.github.io/
17 stars 23 forks source link

Downloading nightlys from cgeo.org.development is broken #328

Closed baiti closed 7 months ago

baiti commented 1 year ago

As stated in the subject line, download links on https://cgeo.org/development don't work, at least not with recent versions of Chrome. Chrome's developer console shows:

Mixed Content: The site at 'https://www.cgeo.org/' was loaded over a secure connection, but the file at 'https://download.cgeo.org/cgeo-nightly.apk' was redirected through an insecure connection. This file should be served over HTTPS. This download has been blocked. See https://blog.chromium.org/2020/02/protecting-users-from-insecure.html for more details.

The reason for this becomes obvious the page's source code is inspected:

<h3 id="download-nightly-builds">Download Nightly Builds</h3>
--
  |  
  | <p><a href="http://download.cgeo.org/cgeo-nightly.apk">c:geo application</a><br />
  | <a href="http://download.cgeo.org/cgeo-nightly-nojit.apk">c:geo application (without JIT)</a><br />
  | <a href="http://download.cgeo.org/cgeo-contacts-nightly.apk">contacts plugin</a></p>
  |  
  | <h2 id="f-droid-repository">F-Droid repository</h2>

Since the browser loaded the page via https, the download links must also be https links otherwise the browser just refuses to follow those links and instead renders the error message shown in the developer console.

Interesting, and at the same time annoying: a regular user who doesn't have the developer console open just sees nothing except that he doesn't get the desired nightly build.