forum

[confirmed] osu!market permissions conflict on some browsers

posted
Total Posts
24
Topic Starter
- Marco -
Problem Details:

If i search for something the result page will be blank

Chrome 30.0.1599.28 beta-m
MillhioreF
The result page appears fine for me on latest Chrome (though not beta.) Sure you don't have an extension that interferes with Google websites somehow?
Topic Starter
- Marco -
Disabled all extention but still blank page :(

With Firefox it works... looks like a chrome bug, will submit this bug to chrome developers...
peppy
I think this is due to a different in security between the two pages (some browsers aren't happy with this). Will look into it.
TheVileOne
I tried searching with firefox vs 23 and none of the searches will go through.

XPJ38
If you are using Firefox 23+, you'll have to "Disable protection on this page":



(URL on the pic is osu! Amazon Store because I just quoted my post from the Amazon Store thread <_<)


Edit: to permanently disable this "protection", follow these instructions:

1. In the address bar, type "about:config" and press Enter. 2. Click the "I'll be careful, I promise!" button. 3. In the search field, type "block_active". 4. Set the value for the one search result ("security.mixed_content.block_active_content") to "false".
(from https://support.mozilla.org/en-US/questions/967760)
Winshley

XPJ38 wrote:

If you are using Firefox 23+, you'll have to "Disable protection on this page":



(URL on the pic is osu! Amazon Store because I just quoted my post from the Amazon Store thread <_<)
From what I can find, pages affected by this issue are:
  1. Every page that has Disqus contents (Changelog, Beatmap Pages, etc.)
  2. Web IRC chat (qwebirc client)
  3. Amazon Store content
  4. Google Custom Search contents
In short, contents coming from third party sites are blocked.

Marking [confirmed] for now.
Topic Starter
- Marco -
On 30.0.1599.37 beta-m this problem is solved :D

Edit: Now you need to click on the sheild and press load unsecure script
MillhioreF
Moving to low priority. Most browsers are unaffected, and the ones that are can be worked around easily.
MillhioreF
Bump. Chrome pushed out an update at some point that caused this to start happening to me. Not using the beta or anything.
Marcin
Maan, you spam.

Also yes, it is annoying as hell on chrome now.
peppy
I can't replicate this on chrome canary or safari. Couldyou post a screenshot/copypaste of the message you are seeing in as much detail as possible? All mentioned reosurces are already being loaded via https as far as I can tell.
Marcin
https://db.tt/k4sWV9w6

Upper right-hand corrner: "This page contains scripts from untrusted sources" And that little link button "wczytaj niezabezpieczony skrypt" Allows me to make it work, but I have to do this everytime...

Anything else I can add to this?
TheVileOne
I don't think you can safely load content via this method with https according to Chrome.

Once you override it seems to work after that, but the https is crossed out.



It stays crossed out for the entire domain when you set this.
MillhioreF
In addition to the above, I get the following message in console on Chrome version 30.0.1599.69m:

[blocked] The page at https://osu.ppy.sh/p/search?cx=00771494 ... k&cof=FORI…osu.ppy.sh%2Fforum%2Fp%2F2626215&ref=osu.ppy.sh%2Fforum%2F5&ss=379j77723j4 ran insecure content from http://www.google.com/cse?cx=0077149450 ... &cof=FORID%…um%252Fp%252F2626215%26ref%3Dosu.ppy.sh%252Fforum%252F5%26ss%3D379j77723j4.
And this one on IE9:
SEC7111: HTTPS security is compromised by http://www.google.com/cse?cx=0077149450 ... 26q%3Dtest
search?cx=007714945049801807819%3Afwdivvi5sik&cof=FORID%3A10&ie=UTF-8&q=test
Firefox 14 just warns you about an unencrypted connection when you try to use the search box at all, and clicking Continue causes everything to work normally.
Topic Starter
- Marco -
On the latest beta

TheVileOne
I just tried to search on FireFox version 24 and it let me search. Can someone check to see if it works in other browsers? I only have IE and Firefox installed on this computer.
Marcin
Chrome fine too.

Just tried again, and doesn't work properly, I guess I had a good luck when trying for first time.
TheVileOne
I'm not sure what happened. The first time I accessed the website I wasn't in https. Now that I triggered https it doesn't allow me to continue unless I allow it. Unlike Chrome I can unblock just the google search page. The rest of the site still remains secure. I wonder if Chrome has an option to unblock just a single webpage too.
TheVileOne
I'm not sure this is fixable. Unless there is a way to make the google page http instead of https or a way to cache the searched content on an https secure area before it is displayed, I don't think it is possible to display insecure content through https without the user allowing it to be displayed. I'm going to move to low priority for now.
XPJ38
I just saw this:



I can confirm Google Search has been fixed on all of my browsers, but not osu!market. I am still having a blank page in Chrome and the "only secured content is displayed" message in IE11 (screenshot). Even after clearing the cache and pressing ctrl+F5.
MillhioreF
Updated misleading topic title.
Topic Starter
- Marco -
I think it's now resolved since we have a new osu!market (also change the old one on the homepage) ;)
XPJ38

marcostudios wrote:

I think it's now resolved since we have a new osu!market (also change the old one on the homepage) ;)
The market and the store are two different things.
Please sign in to reply.

New reply