www-apachecon-discuss mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From sebb <seb...@gmail.com>
Subject Re: Mixed content (partially insecure) on various pages
Date Mon, 08 May 2017 22:48:05 GMT
On 8 May 2017 at 22:00, Nick Burch <nick@apache.org> wrote:
> On Mon, 8 May 2017, sebb wrote:
>>
>> The apachecon pages aren't fully set up for use over https:
>> Several images use hard-coded http: URLs.
>>
>> There are also some links to http://apachecon.com/ URLs which ought to
>> be host-relative URLs.
>
>
> The source of the apachecon site is in svn at
> https://svn.apache.org/repos/infra/apachecon/archive.apachecon.com/ . It's

According to the site itself, the source is at

https://svn.apache.org/repos/infra/apachecon/www.apachecon.com

Which might explain why the changes have not taken ...

> just raw html in there, no fancy CMS stuff, at least for now
>
>> I tried to fix these, but I don't have karma.
>> Is there a recommended way to provide patches?
>
>
> Rich may be able to help with karma?
>
> I've fixed a few obvious ones, hopefully svnpubsub will notice soon and
> deploy!

Not all links need to be changed, only ones which reference page resources.
These are the only ones which cause complaints about mixed content.

However it also makes sense to fix links that reference the apachecon
site so the URL protocol does not change unnecessarily.

e.g. at present the page

https://www.apachecon.com/

has a link "Sign Up Today" which loads the page

http://apachecon.com/sponsor/

Both the protocol and the hostname change.

If the link were expressed as "/sponsor/" it would become:

https://www.apachecon.com/sponsor/

which preserves the protocol and hostname.

> If you see any others, please send a patch here and someone
> (probably Rich or myself) can apply!

Please see attached.

> Thanks
> Nick

Mime
  • Unnamed multipart/mixed (inline, None, 0 bytes)
View raw message