WordPress.org

Ready to get started?Download WordPress

Forums

Twitter Widget Pro
[resolved] Dashboard widget causes SSL mixed content warnings (7 posts)

  1. Ian Dunn
    Member
    Posted 1 year ago #

    The dashboard widget embeds images over HTTP, even if the page is loaded with HTTPS. This creates a mixed-content warning in many browsers.

    I think you should use is_ssl() when generating the markup to insure that the protocol matches the current page. It'd be even better to host the image locally and use plugins_url().

    Until then, an easy fix for other users is to add this statement to a functionality plugin or your theme's functions.php:

    add_filter( 'xpf-dashboard-widget',	'__return_false' );

    http://wordpress.org/extend/plugins/twitter-widget-pro/

  2. Aaron D. Campbell
    Member
    Plugin Author

    Posted 1 year ago #

    Hosting the image locally requires packaging it with the plugin, which makes for slower installation and updates. However, you have a very valid point...it should be loaded over SSL if the site is.

    I don't currently have an SSL cert set up on my CDN URL, but I'll get it set up as soon as I can and release a fix.

  3. Ian Dunn
    Member
    Posted 1 year ago #

    Awesome, thanks.

    Hosting locally vs remotely is probably somewhat subjective, but keep in mind that it's also slower to resolve additional domain names, especially when multiple plugins host assets on different CDNs.

  4. Aaron D. Campbell
    Member
    Plugin Author

    Posted 1 year ago #

    True, but in many cases another resolved domain with a fast server on the other end can actually still serve an image faster. Also, an image tag is non-blocking, so the worst case scenario is that your dashboard will load but the image won't show for a second.

  5. Ian Dunn
    Member
    Posted 1 year ago #

    Fair enough. Splitting the resources between local and external just seems awkward to me personally, but you've made a good case for it :)

  6. Aaron D. Campbell
    Member
    Plugin Author

    Posted 1 year ago #

    This should be fixed in 2.4.0. Please download it and check it out!

  7. Ian Dunn
    Member
    Posted 1 year ago #

    Hey, sorry it took me so long to test. I finally had time today, though, and it looks great. Thanks for being so responsive :)

Topic Closed

This topic has been closed to new replies.

About this Plugin

About this Topic

Tags

No tags yet.