mixed content resource issue for https

[kristophor]

Mixed Content: The page at 'https://krischen.solid.community/profile/card' was loaded over HTTPS, but requested an insecure resource 'http://xmlns.com/foaf/0.1/PersonalProfileDocument'. This request has been blocked; the content must be served over HTTPS.

[justinwb]

@kristophor can you provide a bit more detail? What are you doing when you run into this error? What browser are you using? etc?

[kristophor]

I am using chrome Version 70.0.3538.77
this is due to server referencing to non-https resources trigger security issue.
i recommend change everything http to https to avoid mix content error.

[kjetilk]

Right, OK, so it happens in the edit profile mode.

We are aware that you can't mix content, it is just unclear to us what in the code would try to do that. I haven't been able to reproduce it om my POD.

But thanks, now I can target that more accurately!

[dmitrizagidulin]

My question is - what part of the code is trying to actually fetch the foaf schema?

Cause what's erroring out is the request to http://xmlns.com/foaf/0.1/PersonalProfileDocument. What is requesting that url?

[dmitrizagidulin]

i recommend change everything http to https to avoid mix content error.

So, for various historical and practical reasons, we can't change existing ontologies (like foaf) from http to https.
Which means that the only thing that'll work is disabling the code that's trying to fetch them. Or have the code go through the cors proxy.

[kjetilk]

My question is - what part of the code is trying to actually fetch the foaf schema?

Cause what's erroring out is the request to http://xmlns.com/foaf/0.1/PersonalProfileDocument. What is requesting that url?

Indeed, that's what we need to figure out.