Page 1 of 1
[RESOLVED] force https
Posted: Sun Oct 25, 2009 10:36 pm
by polie
Hi,
I'm using the feature force the following sites to use secure https connections on a password protectet (.htaccess) wordpress site.
When I enter the page, the password for the ssl connection is asked, but for each image, firefox is asking for the password again and not via https. (according to the dialogue).
is noscript ignoring to force ssl on embedded pictures?
polie
Re: force https
Posted: Sun Oct 25, 2009 10:54 pm
by Tom T.
URL?
Re: force https
Posted: Mon Oct 26, 2009 1:54 pm
by therube
(Wonder if the repeated password prompts are not a Mozilla bug?)
Re: force https
Posted: Mon Oct 26, 2009 11:27 pm
by Tom T.
therube wrote:(Wonder if the repeated password prompts are not a Mozilla bug?)
It would certainly be easier to find out if the OP would give us the URL so that we could create a test account.
But do you have some known bug in mind, or some specific reason for believing that it's a Mozilla bug? If so, that would help.
Re: force https
Posted: Tue Oct 27, 2009 4:39 am
by therube
(Quite a number of "multiple password prompts" bugs.
Some fixed, some not. Some possibly fixed but not noted. Some possibly fixed but not. ...
You could start here,
SM with a master password.
Links to
https://bugzilla.mozilla.org/show_bug.cgi?id=409665, dup'd to here,
https://bugzilla.mozilla.org/show_bug.cgi?id=414047 ...)
Re: force https
Posted: Tue Oct 27, 2009 6:05 am
by Tom T.
That's for SeaMonkey. OP is on Fx.
Both are for SeaMonkey on Win XP. OP is on Firefox on Mac.
I stand by my original statement that the best way to investigate this is for the OP to provide the URL. Then it will be easier to determine if it's a NS issue or a Fx issue -- or a site-coding issue, which happened recently on a broken "search" box at a website.
Re: force https
Posted: Tue Oct 27, 2009 7:31 am
by polie
Hi
sorry, the page is in our intranet, so I can't provide any URL. But it is run on the wordpress package from debian etch (wp 2.0.12-alpha+debian patches).
The multiple password prompt is annoying, but not my real problem.
I'm posting here in the NoScript forum, since the additional password prompts are not https anymore. Only the initial prompt is, the others are http.
Sure, the html source of the page contains http links to the images, but I wanted NoScript to force https.
This seems not to work for the images of the page. The html is loaded via https.
However if I deactivate NoScript I'm prompted only once for the password.
polie
Re: force https
Posted: Tue Oct 27, 2009 10:26 pm
by Tom T.
Is there any way that you can PM me credentials to access your intranet from the Internet, or is it sealed off (often a wise choice)? I promise not to do anything inside except investigate the issue, and to delete the credentials when done.
Re: force https
Posted: Wed Oct 28, 2009 5:54 am
by polie
Hi Tom,
sorry, I'm not allowed to do that.
Is there any chance to solve the problem without access to the page?
I can wget a copy of the page and send it via pm to you.
polie
Re: force https
Posted: Wed Oct 28, 2009 6:31 am
by GµårÐïåñ
If you CC me on that PM, I can give you a programmer's perspective on it. Just saying the offer is there.
Re: force https
Posted: Wed Oct 28, 2009 7:23 am
by Tom T.
@ polie: GµårÐïåñ has many, many years of experience in both web site design and software development across a wide variety of platforms. I'm sure he'd find the issue faster than I would. Please PM that page directly to him.
@ GµårÐïåñ: Thank you for the kind offer, Brother. As mentioned, I know that with your length and breadth of experience, you'll get to the heart of it very quickly. I'll be looking forward to seeing the results posted here.
Re: force https
Posted: Wed Oct 28, 2009 9:22 pm
by GµårÐïåñ
You are too kind, I will do my best and hopefully I can live up to the kind and generous faith placed in me.

Re: force https
Posted: Thu Oct 29, 2009 12:15 am
by Tom T.
GµårÐïåñ wrote:You are too kind, I will do my best and hopefully I can live up to the kind and generous faith placed in me.

Not a doubt in my mind. Can't wait to see your astute analysis.
Re: force https
Posted: Thu Oct 29, 2009 12:58 am
by GµårÐïåñ
I will let you know after I get it and analyze it, I don't have it yet.
Re: force https
Posted: Tue Nov 17, 2009 12:53 am
by Giorgio Maone
Fixed in
NoScript 1.9.9.15, thanks for reporting.