From mboxrd@z Thu Jan 1 00:00:00 1970 From: ludo@gnu.org (Ludovic =?utf-8?Q?Court=C3=A8s?=) Subject: Re: Cross-Origin Request blocked when browing non-www of packages page and mixed content Date: Wed, 27 Apr 2016 16:37:47 +0200 Message-ID: <87inz315j8.fsf@gnu.org> References: <87lh483cov.fsf@gnu.org> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:39017) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1avQbC-0001qr-17 for guix-devel@gnu.org; Wed, 27 Apr 2016 10:37:58 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1avQb8-0007j5-Q8 for guix-devel@gnu.org; Wed, 27 Apr 2016 10:37:53 -0400 Received: from fencepost.gnu.org ([2001:4830:134:3::e]:50393) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1avQb8-0007j1-Mj for guix-devel@gnu.org; Wed, 27 Apr 2016 10:37:50 -0400 In-Reply-To: <87lh483cov.fsf@gnu.org> (Roel Janssen's message of "Wed, 20 Apr 2016 10:29:52 +0200") List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Roel Janssen Cc: guix-devel@gnu.org Hello! Roel Janssen skribis: > I noticed that the build status icons don't work when browing: > https://gnu.org/software/guix/packages/ (Notice the lack of 'www.') > > The reason: > CORS header 'Access-Control-Allow-Origin' does not match > 'https://www.gnu.org'. > > So, could we either add 'https://gnu.org' to the Hydra nginx config, or > add a redirect to the www-variant on gnu.org? I don=E2=80=99t know how to fix it: there can be only one CORS header and it can contain only one URL. Thoughts? Regarding www.gnu.org, it=E2=80=99s something to ask webmasters@gnu.org. W= ould you like to email them? > Then, we also have the problem of loading mixed content (mixed transporta= tion > over HTTP and HTTPS in the same page): I think it would be worth to try addressing this problem at the GNU scale, because this info (logo URLs, descriptions, etc.) is something we get from a canonical database of GNU packages; see (guix gnu-maintenance) for details. Could you email bug-womb@gnu.org with a suggestion to host all logos somewhere on gnu.org? I think it=E2=80=99d be beneficial not just for Guix. Thanks! Ludo=E2=80=99.