Page MenuHomePhabricator

Chrome blocks API calls to foreign Wikipedia APIs due to insecure protocol
Closed, ResolvedPublic

Description

Author: p.selitskas

Description:
When I try to link the newly created article with a Wikidata item, it's proposed to specify a project and an article in it.

I use HTTPS protocol in Wikipedia, and WikidataClient tries to access foreign Wikipedia APIs via HTTP. Thus it's been blocked by Chrome:

[blocked] The page at https://be-x-old.wikipedia.org/[skipped] ran insecure content from http://en.wikipedia.org/w/api.php?[skipped].

It appears that wbSiteDetails is not populated the right way: apiUrl and pageUrl should keep the current protocol, shouldn't they? We could use protocol independent URLs, but I'm not sure whether jQuery interprets them correctly in ajax requests.


Version: unspecified
Severity: normal

Details

Reference
bz47732

Event Timeline

bzimport raised the priority of this task from to Needs Triage.Nov 22 2014, 1:43 AM
bzimport set Reference to bz47732.
bzimport added a subscriber: Unknown Object (MLST).

Related URL: https://gerrit.wikimedia.org/r/61917 (Gerrit Change I8d13025726300f367e054f3ace52c945003d80c4)

https://gerrit.wikimedia.org/r/61917 (Gerrit Change I8d13025726300f367e054f3ace52c945003d80c4) | change APPROVED and MERGED [by jenkins-bot]

Verified in Wikidata demo sprint 22-5