Forum bug? Clicking reply gives a spinner but no editor when on non-https

[Peter Parker]

Not sure if anyone else is getting this. I'm using Chrome on a Mac FWIW.

Javascript console suggests it's a SSL cross-origin issue :-

Failed to load https://forums.hexus.net/ckeditor.php?l=en&t=134075... : Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin 'http://forums.hexus.net' is therefore not allowed access.

I clicked through to the forum from a non-SSL new story page, but it's trying to load a resource via HTTPS.

Work around is to change the forum URL to https://forums.hexus.net/ ...

I'm not sure if Hexus is officially HTTPS yet but it's nice to see security being added. Both HTTP and HTTPS seem to work though https://www.hexus.net gives a 403 Forbidden where https://hexus.net works fine.

[Zak33]

thanks for the headsup PP

migrating all the old non HTTPS articles is .... lengthy, not because of the text just the sheer amount of links, images etc.

We're fully HTTPS

[Zak33]

Peter P... do you have the url for the news link please

[MLyons]

Not sure if anyone else is getting this. I'm using Chrome on a Mac FWIW.

Javascript console suggests it's a SSL cross-origin issue :-



I clicked through to the forum from a non-SSL new story page, but it's trying to load a resource via HTTPS.

Work around is to change the forum URL to https://forums.hexus.net/ ...

I'm not sure if Hexus is officially HTTPS yet but it's nice to see security being added. Both HTTP and HTTPS seem to work though https://www.hexus.net gives a 403 Forbidden where https://hexus.net works fine.

Just to confirm does this only happen when you click through to the site on non HTTPS? I just loaded the forums in HTTP and although i got the spinner the box appeared and i was able to make a post. The 403 thing We'll look into now

EDIT: Did you click reply or reply with quote? reply with quote gives me the error you describe but standard reply button seems fine

[Peter Parker]

@Zak I'd click through from the "Dyson aims to launch electric car in 2020" story on plain old HTTP.

@Mason yeah you're right I clicked reply with quote.

I'll update my bookmarks to HTTPS and try to purge HTTP from my suggest history.

The web was so much easier in the 'good ole days' when nobody cared about security and there was none of this Javascript rubbish!

[Zak33]

The web was so much easier in the 'good ole days' when nobody cared about security and there was none of this Javascript rubbish!

with bells upon it

[MLyons]

Also this should now be fixed. There's a few more links I've missed but most of the site will now push you over to HTTPS when you click a link whenever it's possible.

[virtuo]

The web was so much easier in the 'good ole days' when nobody cared about security

Like, 2 weeks ago for Hexus?

Edit: it's a joke

[Zak33]

lol

virtuo get cookie of the week

[MLyons]

Like, 2 weeks ago for Hexus?

Edit: it's a joke

Part of me want's to say well done but the ill part of me wants to ban you.

[virtuo]

lol

virtuo get cookie of the week

Make sure it's a secure cookie