From mboxrd@z Thu Jan 1 00:00:00 1970 From: Roel Janssen Subject: Re: Cross-Origin Request blocked when browing non-www of packages page and mixed content Date: Mon, 16 May 2016 21:30:54 +0200 Message-ID: <87a8jp2429.fsf@gnu.org> References: <87lh483cov.fsf@gnu.org> <87inz315j8.fsf@gnu.org> <87d1p35qgt.fsf@gnu.org> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:50667) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1b2OEY-0002A3-RK for guix-devel@gnu.org; Mon, 16 May 2016 15:31:27 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1b2OEJ-00065A-Vg for guix-devel@gnu.org; Mon, 16 May 2016 15:31:17 -0400 In-reply-to: <87d1p35qgt.fsf@gnu.org> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Ludovic =?utf-8?Q?Court=C3=A8s?= Cc: guix-devel@gnu.org Roel Janssen writes: > Ludovic Courtès writes: > >> Hello! >> >> Roel Janssen skribis: >> >>> I noticed that the build status icons don't work when browing: >>> https://gnu.org/software/guix/packages/ (Notice the lack of 'www.') >>> >>> The reason: >>> CORS header 'Access-Control-Allow-Origin' does not match >>> 'https://www.gnu.org'. >>> >>> So, could we either add 'https://gnu.org' to the Hydra nginx config, or >>> add a redirect to the www-variant on gnu.org? >> >> I don’t know how to fix it: there can be only one CORS header and it >> can contain only one URL. Thoughts? >> >> Regarding www.gnu.org, it’s something to ask webmasters@gnu.org. Would >> you like to email them? > > I e-mailed them. They have changed the behavior so it always redirects to the www variant. You can try it: https://gnu.org/s/guix/ => https://www.gnu.org/software/guix/ So this has been fixed now. Kind regards, Roel Janssen