Skip to content

GitLab

  • Projects
  • Groups
  • Snippets
  • Help
    • Loading...
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
    • Switch to GitLab Next
  • Sign in / Register
coUserver
coUserver
  • Project overview
    • Project overview
    • Details
    • Activity
    • Releases
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
    • Locked Files
  • Issues 2
    • Issues 2
    • List
    • Boards
    • Labels
    • Service Desk
    • Milestones
    • Iterations
  • Merge Requests 0
    • Merge Requests 0
  • Requirements
    • Requirements
    • List
  • Operations
    • Operations
    • Incidents
    • Environments
  • Packages & Registries
    • Packages & Registries
    • Package Registry
    • Container Registry
  • Analytics
    • Analytics
    • Code Review
    • Insights
    • Issue
    • Repository
    • Value Stream
  • Wiki
    • Wiki
  • Snippets
    • Snippets
  • Members
    • Members
  • Activity
  • Graph
  • Create a new issue
  • Commits
  • Issue Boards
Collapse sidebar
  • Children of Ur
  • coUservercoUserver
  • Issues
  • #2

Closed
Open
Opened Mar 10, 2019 by Alexander W. Janssen@yalla1

Mixed content

Hi,

I'm currently checking out which browser on Linux gives me the best user experience. While checking out the performance monitor in Firefox, I noticed the following message while petting a bean tree:

Loading mixed (insecure) display content “http://www.glitchthegame.com/img/skills-460/gardening_1.v1428362783.png” on a secure page[Learn More]
main.dart.js:12831:16
[Server Communication] Sending pet to entity: migrate10661 (minified:lS) with arguments: {} 0:13:47

However, this image is accessible encrypted & unencrypted:

[alex@zbox ~]$ curl -I http://www.glitchthegame.com/img/skills-460/gardening_1.v1428362783.png
HTTP/1.1 200 OK
Date: Sun, 10 Mar 2019 11:00:11 GMT
Content-Type: image/png
Content-Length: 21084
...
[alex@zbox ~]$ curl -I https://www.glitchthegame.com/img/skills-460/gardening_1.v1428362783.png
HTTP/2 200 
date: Sun, 10 Mar 2019 11:00:16 GMT
content-type: image/png
content-length: 21084
...

As I'm not familiar with Dart or the codebase, I can't tell exactly from where this asset is being loaded.

As some browsers do not allow the usage of mixed content, this might lead to usability issues.

Hope that helps, Brianbrainerz.

Assignee
Assign to
None
Milestone
None
Assign milestone
Time tracking
None
Due date
None
Reference: ChildrenOfUr/coUserver#2