search

marubinotto / Piggydb

Piggydb is a Web notebook application that provides you with a platform to build your knowledge personally or collaboratively.
http://piggydb.net/
Apache License 2.0
149 stars 35 forks source link

Piggydb can not run in a secure mode (https) #3

Closed rjkantor closed 10 years ago

rjkantor commented 10 years ago

I have noticed the the edit menu does not appear for each fragment under tomcat 8. Also, when saving a fragment, the screen hangs and does not allow editing. Please advise.

marubinotto commented 10 years ago

I've tested with tomcat-8.0.3 on Mac OS X 10.8.5, but I couldn't reproduce the problem.

I suspect it's caused by the browser settings. What browser and its version do you use? And can you reproduce the problem on the sandbox ( http://piggydb.jp/sandbox guest/guest )?

rjkantor commented 10 years ago

It seems it is related to the https encryption. In firefox 27.0.1 I can allow non-encrypted content and the hang and the popup edit window does appear. In chrome 33.x I am unable to get the site to work correctly. Based on this, does that mean piggydb can not run in a secure mode at this time?

rjkantor commented 10 years ago

Ok, I was able to allow mixed content in chrome as well. Will this be fixed moving forward?

marubinotto commented 10 years ago

does that mean piggydb can not run in a secure mode at this time?

It should work, but from your report it seems that Piggydb contains non-encrypted static resources (URL starting with http://). Could you specify which resources caused the security warning?

rjkantor commented 10 years ago

I search the page src and found this http://. I noticed the menu does not appear and the add new fragment doesn't work until I allow mix mode. Do either of these use static http:// calls?

http://cdn.mathjax.org/mathjax/latest/MathJax.js?config=TeX-AMS_HTML

code --- <script type="text/javascript" src="http://cdn.mathjax.org/mathjax/latest/MathJax.js?config=TeX-AMS_HTML">

marubinotto commented 10 years ago

Ah! That was added in the previous version.

Thank you very much for pointing it out, I'll fix it in the next release.

You can fix it by replacing the URL ( http://cdn.mathjax.org/mathjax/latest/MathJax.js ) in the file border-template.htm with https://c328740.ssl.cf1.rackcdn.com/mathjax/latest/MathJax.js

cf. http://www.mathjax.org/resources/faqs/#problem-https

rjkantor commented 10 years ago

Yes, editing the file, fixed the issue.

Thank you, Rob