From mboxrd@z Thu Jan 1 00:00:00 1970 From: Ricardo Wurmus Subject: Re: Adding build status to the package list table Date: Wed, 03 Feb 2016 10:41:49 +0100 Message-ID: <8737tai18b.fsf@elephly.net> References: <87poz6jgqi.fsf@gnu.org> <877flchhzg.fsf@gnu.org> <87poz4k4eh.fsf@gnu.org> <87610we16l.fsf@gnu.org> <878u5rjry5.fsf@gnu.org> <87r3jj9wdu.fsf@gnu.org> <87fuzvo7i3.fsf@gnu.org> <87oaeifahj.fsf@gnu.org> <87r3hx85ow.fsf@gnu.org> <8760z6hezr.fsf@gnu.org> <87ziwi1wcn.fsf@gnu.org> <8760z6e4e1.fsf@gnu.org> <87wpqo583c.fsf@gnu.org> <87oabyxhv9.fsf@gnu.org> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:58978) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1aQtx2-0004u5-9B for guix-devel@gnu.org; Wed, 03 Feb 2016 04:42:20 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1aQtwx-0001iq-H1 for guix-devel@gnu.org; Wed, 03 Feb 2016 04:42:16 -0500 In-reply-to: <87oabyxhv9.fsf@gnu.org> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org To: Ludovic =?utf-8?Q?Court=C3=A8s?= Cc: guix-devel@gnu.org Ludovic Courtès writes: > Roel Janssen skribis: > >> We need to add the following line to the response header at >> hydra.gnu.org: >> >> Access-Control-Allow-Origin: "http://www.gnu.org" >> >> Here's how to do it: >> http://enable-cors.org/server_nginx.html >> >> Which boils down to adding this line to the nginx config: >> add_header 'Access-Control-Allow-Origin' 'http://www.gnu.org'; > > OK, I’ve done that for /api requests (with the full URI, that is > and variants thereof). > Now, when clicking on “Expand”, IceCat no longer complains about CORS, > but it fails to expands and reports this: > > Blocked loading mixed active content > "http://hydra.gnu.org/api/latestbuilds?nr=1&project=gnu&jobset=master&job=adwaita-icon-theme-3.18.0.x86_64-linux" > > with a link to: > > https://developer.mozilla.org/en-US/docs/Security/MixedContent This is because the current page is encrypted but the content from hydra is not. Can we serve hydra.gnu.org/api over HTTPS? ~~ Ricardo