Menu

#881 Remove mixed protocol when behind SSL

None
closed
None
1
2014-01-02
2014-01-02
No One
No

When awstats is behind https, the Google Chart API results in mixed protocol (http/https) which most browsers now block by default. All Google URL's should be https without care of awstats protocol.

File: wwwroot/cgi-bin/plugins/graphgooglechartapi.pm

Line 32:
- my $ChartProtocol = "http://";
+ my $ChartProtocol = "https://";

Line 172:
- print "<script type="text/javascript" src="http://www.google.com/jsapi"></script>\n";
+ print "<script type="text/javascript" src="https://www.google.com/jsapi"></script>\n";

Discussion

  • No One

    No One - 2014-01-02

    Ugh!! Stupid forms:

    File: wwwroot/cgi-bin/plugins/graphgooglechartapi.pm

    Line 32:
    - my $ChartProtocol = "http://";
    + my $ChartProtocol = "https://";

    Line 172:
    - print "<script type='text/javascript' src='http://www.google.com/jsapi'></script>\n";
    + print "<script type='text/javascript' src='https://www.google.com/jsapi'></script>\n";

     
  • Laurent Destailleur (Eldy)

    Patch added into 7.3 beta

     
  • Laurent Destailleur (Eldy)

    • status: open --> closed
    • assigned_to: Laurent Destailleur (Eldy)
    • Group: -->
     

Log in to post a comment.