search

codeforcroatia / popravi.to

This is popular map-based reporting platform FixMyStreet for Croatia named "Popravi.to"
http://popravi.to
Other
9 stars 7 forks source link

Performing a search query triggers an “insecure connection” warning in Firefox #163

Closed simevidas closed 2 years ago

simevidas commented 2 years ago
  1. Open https://popravi.to/ in desktop Firefox
  2. Type something into the search box and press Enter

I’m on macOS. Firefox shows me this warning very rarely on other sites, so it’s not a common occurence. Off the top of my head, I can’t think of any other website that has this issue.

Screenshot 2021-11-02 at 15 38 33
simevidas commented 2 years ago

I had to temporarily disable HTTPS-only mode in Firefox to even see the non-HTTPS request in the Network panel, but it’s there, which confirms the bug.

Screenshot 2021-11-02 at 15 48 55
schlos commented 2 years ago

I can confirm the same problem on Brave browser: Screenshot from 2021-11-02 15-55-06

Related to this, GH issue upstream: https://github.com/mysociety/fixmystreet/issues/2814 And discussion on a mailing list: https://groups.google.com/a/mysociety.org/g/fixmystreet/c/4Xt21ZL3OhM

schlos commented 2 years ago

I fixed it by adding the following in the @catalyst section in NGINX config:

        proxy_set_header X-Forwarded-Port 443;
        proxy_set_header X-Forwarded-Host $host;

@simevidas Thank you for reporting the error! Please check if it's working now on your end.