After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 763064 - Tutorial page is blank in Chrome because of unsafe script
Tutorial page is blank in Chrome because of unsafe script
Status: RESOLVED FIXED
Product: GnuCash
Classification: Other
Component: Website
unspecified
Other All
: Normal normal
: ---
Assigned To: gnucash-documentation-maint
gnucash-documentation-maint
Depends on:
Blocks:
 
 
Reported: 2016-03-03 22:51 UTC by Joe Duarte
Modified: 2018-06-29 23:47 UTC
See Also:
GNOME target: ---
GNOME version: ---

Attachments
Screenshot of Chrome pop-up message (12.09 KB, image/png)
2016-03-03 22:51 UTC, Joe Duarte 		Details

Description Joe Duarte 2016-03-03 22:51:12 UTC 
Created attachment 323031 [details]
Screenshot of Chrome pop-up message

If one visits the tutorial page in Chrome, it's blank.

Chrome will display a somewhat unobtrusive shield icon at the end of the address bar (far right), which most users are unlikely to notice. Clicking on this icon produces the message that the page is trying to load a script from unauthenticated sources (screenshot attached.)

If the user chooses to load the unsafe script -- an option presented in the pop-up -- the tutorial page renders.

Note that most users will probably not see an option to load the script, since you have to click on the shield to be given the option.
Comment 1 Joe Duarte 2016-03-03 22:53:10 UTC 
Page URL: https://www.gnucash.org/viewdoc.phtml?doc=guide

Chrome version: 48, 64-bit

OS: Windows 10, 64-bit
Comment 2 John Ralls 2016-03-03 23:05:32 UTC 
I can replicate this. When viewed in Chrome's console the following messages explain the problem:
viewdoc.phtml:180 Mixed Content: The page at 'https://www.gnucash.org/viewdoc.phtml?doc=guide' was loaded over HTTPS, but requested an insecure resource 'http://www.gnucash.org/docs/v2.6/C/gnucash-guide/index.html'. This request has been blocked; the content must be served over HTTPS.
viewdoc.phtml:189 Mixed Content: The page at 'https://www.gnucash.org/viewdoc.phtml?doc=guide' was loaded over HTTPS, but requested an insecure image 'http://www.w3.org/Icons/valid-xhtml-rdfa'. This content should also be served over HTTPS.
Comment 3 John Ralls 2016-03-04 18:21:50 UTC 
Fixed now, thanks.
Comment 4 John Ralls 2016-03-05 04:12:56 UTC 
Turns out the certificates aren't valid, so for until that's sorted you must use http rather than https for accessing *.gnucash.org.
Comment 5 John Ralls 2016-03-05 20:40:34 UTC 
Fixed better this time.
Comment 6 John Ralls 2018-06-29 23:47:40 UTC 
GnuCash bug tracking has moved to a new Bugzilla host. This bug has been copied to https://bugs.gnucash.org/show_bug.cgi?id=763064. Please update any external references or bookmarks.