Forum

Thread tagged as: Problem, Runway

Scripts from unauthenticated sources (Chrome Browser)

I've spotted an issue in Perch Runway (might be in Perch too) with Chrome 59.0.3071.115.

If you try to delete an entry from a collection, there's the usual popup showing 'Are you sure? (Delete/Cancel)'. Clicking 'Delete' appears to do nothing. But if you clear that box and then reload the collection display, it has indeed deleted an entry. Then I spotted, in the browser address bar, a warning icon of 'the page is trying to load scripts from unauthenticated sources'.

I guess the same might be happening in other parts of Perch Admin where there is a 'are you sure' popup. It might only be an issue with the latest Chrome. I've not needed to delete any collection items for a while.

Graham Street

Graham Street 17 points

  • 4 years ago
Drew McLellan

Drew McLellan 2638 points
Perch Support

Does it give any detail with the error, such as a URL?

Their error icon has a 'learn more' link that points to https://support.google.com/chrome/answer/1342714

Reading that info, I loaded 'Developer Tools' and checked the console. This entry is visible ...

Mixed Content: The page at 'https://www.******.org.uk/perch/core/apps/content/collections/?id=7' was loaded over HTTPS, but requested an insecure XMLHttpRequest endpoint 'https://www.******.org.uk/'. This request has been blocked; the content must be served over HTTPS.

Hope that helps locate the issue?

Drew McLellan

Drew McLellan 2638 points
Perch Support

Looks like you've got a mixed environment. Can you not use HTTPS throughout?

The website is https throughout. This issue is coming up inside Perch Admin, when trying to delete an item in a collection. The URL is https. Looking through the source code of the Admin page (showing the collection items) I can see no elements that have http on them. Something to do with trying to delete a collection item is causing the 'insecure XMLHttpRequest endpoint' with http instead of https on the domain name. Any ideas where to look next?

Aha - I think I've got it. I was trying to work out what might be using XML. I've disabled the 'Logger' app. That's the Perch 3 version of 'Activity Log' and the problem's gone away.

I've contacted the author to report it. He's responded and it will get looked at in the next few days.

I've just installed and tested version 1.0.1 of the 'Logger' app that James has released and just contacted me about.

It fixes the issue I found while deleting collection items on a secure website.