From mboxrd@z Thu Jan 1 00:00:00 1970 From: Roel Janssen Subject: Re: Cross-Origin Request blocked when browing non-www of packages page and mixed content Date: Tue, 03 May 2016 13:30:10 +0200 Message-ID: <87d1p35qgt.fsf@gnu.org> References: <87lh483cov.fsf@gnu.org> <87inz315j8.fsf@gnu.org> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:55844) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1axYXX-0001Yg-Gm for guix-devel@gnu.org; Tue, 03 May 2016 07:31:01 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1axYXL-00051u-N3 for guix-devel@gnu.org; Tue, 03 May 2016 07:30:50 -0400 In-reply-to: <87inz315j8.fsf@gnu.org> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Ludovic =?utf-8?Q?Court=C3=A8s?= Cc: guix-devel@gnu.org Ludovic Courtès writes: > Hello! > > Roel Janssen skribis: > >> I noticed that the build status icons don't work when browing: >> https://gnu.org/software/guix/packages/ (Notice the lack of 'www.') >> >> The reason: >> CORS header 'Access-Control-Allow-Origin' does not match >> 'https://www.gnu.org'. >> >> So, could we either add 'https://gnu.org' to the Hydra nginx config, or >> add a redirect to the www-variant on gnu.org? > > I don’t know how to fix it: there can be only one CORS header and it > can contain only one URL. Thoughts? > > Regarding www.gnu.org, it’s something to ask webmasters@gnu.org. Would > you like to email them? I e-mailed them. >> Then, we also have the problem of loading mixed content (mixed transportation >> over HTTP and HTTPS in the same page): > > I think it would be worth to try addressing this problem at the GNU > scale, because this info (logo URLs, descriptions, etc.) is something we > get from a canonical database of GNU packages; see (guix > gnu-maintenance) for details. > > Could you email bug-womb@gnu.org with a suggestion to host all logos > somewhere on gnu.org? I think it’d be beneficial not just for Guix. For this I have to further look into it for the details. I don't have time for that right now, but when I do find time, I'll have another look. Thanks for your time! Kind regards, Roel Janssen