Mixed content issues in browser

thomas-andersen
(@thomas-andersen-1)

11 years, 8 months ago

Hi

When the site is running using SSL and this plug-in is used, the browser will report Mixed content warning [1] in the browser console when the video is requested.

The reason for this warning is that the page is requested using HTTPS while the video resource is requested with HTTP

See Advanced_Responsive_Video_Embedder -> build_embed()

The ideal way to fix this is to use protocol relative urls and let the browser request the video with the same protocol as the host page.

Eg. “//youtube.com/?v=soev328”

Some caveats:

– Video sources must support both http and https
– Some IE8 issues [2]

[1] https://developer.mozilla.org/en-US/docs/Security/MixedContent
[2] http://www.paulirish.com/2010/the-protocol-relative-url/
[3] http://stackoverflow.com/questions/4659345/is-there-any-downside-for-using-a-leading-double-slash-to-inherit-the-protocol-in

Viewing 5 replies - 1 through 5 (of 5 total)

Plugin Author Nico
(@nico23)

11 years, 8 months ago

I know about this and this plugin supports relative protocol for youtube for a long time and I released a update yesterday that enables this for vimeo!

I don’t know what other providers might support this. Seems that a lot of them don’t. Would be great if you (or someone) would tell me other providers that support it so I can enable it.

Thread Starter thomas-andersen
(@thomas-andersen-1)

11 years, 7 months ago

> Would be great if you (or someone) would tell me other providers that support it so I can enable it.

for a quick start youtube supports this. I guess YouTube is one of the more popular video providers.

Will try to get a more complete list of providers next time.

Thanks!

Plugin Author Nico
(@nico23)

11 years, 7 months ago

Quoting myself:

“I know about this and this plugin supports relative protocol for youtube for a long time …”

Meaning SSL/HTTPS is supported already and is used when your site is using HTTPS.

Gerald
(@painsicook)

11 years, 5 months ago

Hi. Thanks for the nice plugin. It works almost perfectly.

I think, what thomas-andersen is refering to, is the non-protocoll-independent URIs for the background images. E.g. in the file advanced-responsive-video-embedder.php, line 1403:

$maxres = 'http://img.youtube.com/vi/' . $id . '/maxresdefault.jpg';

Which obviously would just work with sites that are http, not https. On https you’ll get the mixed content issue.

Plugin Author Nico
(@nico23)

11 years, 5 months ago

Nice catch Gerald! Will fix this soon, thanks.

I don’t see thomas referring to this though.

Viewing 5 replies - 1 through 5 (of 5 total)

The topic ‘Mixed content issues in browser’ is closed to new replies.

Tags