After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 745632 - should not use http:// links for uploaded media should not use http:// links for uploaded media
Product: website
Classification: Infrastructure
Other Linux
: Normal normal
: ---
Assigned To: Blogs Website Maintainers
Blogs Website Maintainers
Depends on:
Reported: 2015-03-04 18:55 UTC by Michael Catanzaro
Modified: 2015-03-19 15:39 UTC
See Also:
GNOME target: ---
GNOME version: ---

Description Michael Catanzaro 2015-03-04 18:55:14 UTC
To reproduce, go to your site, click New -> Post from the title bar, then click the Add Media button. Note that all uploaded files are given an http:// URL (which can't be changed). This means it's impossible to use the images in a blog post without trigger a browser security warning, unless when writing a post I switch from the default Visual editor that I actually use to the Text editor and then manually edit the resultant HTML. (Just changing the links to https:// fixes the problem. I edited each image I've used in each post on my blog in order to get rid of Epiphany's security warning icon. Safari is the only noteworthy browser that won't show this warning.)

I guess this will be difficult to fix for articles that are already published, but it can be fixed for new articles/media going forward.
Comment 1 Michael Catanzaro 2015-03-04 18:56:20 UTC
Also note that when any of this mixed content is loaded, my session cookie is sent in the clear with the request (but that should be fixed separately in bug #745579).
Comment 2 Andrea Veri 2015-03-05 15:40:34 UTC
This is related to Please confirm if this is resolved for your case so we can fix all the blogs we host.
Comment 3 Michael Catanzaro 2015-03-05 16:36:57 UTC
Yes, this was fixed for my blog by your change in bug #745579. Great, thanks!
Comment 4 Andrea Veri 2015-03-19 15:39:11 UTC should have this issue fixed for all the hosted blogs.