Page MenuHomePhabricator

WikiMiniAtlas has to be loaded via SSL in secure environments
Closed, InvalidPublic

Description

Author: gerald.maurer

Description:
Every wiki page loads MiniAtlas from http://meta.wikimedia.org but in secure environments it has to be loaded via https too.

In secure environments the wiki is called via https and returns all content but the MiniAtlas secure. This leads (for e.g. Internet Explorer) to a popup message at every page that the current page uses mixed mode secure and unsecure content. If you use an open browser you could enable your browser to accept mixed mode pages from this site but in enterprise environments the browser is not open and you are not able to activate this setting.


Version: unspecified
Severity: normal

Details

Reference
bz17966

Event Timeline

bzimport raised the priority of this task from to Medium.Nov 21 2014, 10:31 PM
bzimport set Reference to bz17966.
bzimport added a subscriber: Unknown Object (MLST).

On English Wikipedia, it should be loaded secure: See http://en.wikipedia.org/wiki/MediaWiki:Common.js
Other languages should use the same load technique.

If WMA uses further mixed content, then this should be filed as an issue for the toolserver.
https://jira.toolserver.org/browse/WMA