Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

insecure content loaded by pnotify #499

Closed
vajonam opened this issue Apr 14, 2020 · 9 comments
Closed

insecure content loaded by pnotify #499

vajonam opened this issue Apr 14, 2020 · 9 comments
Assignees
Labels
bug possible resolution A non-confirmed solution exists for this issue. It may or may not be available on the master branch Waiting for response

Comments

@vajonam
Copy link

vajonam commented Apr 14, 2020

Looks like pnotify is loading some content like icons from

http://sciactive.com/pnotify/includes/desktop/error.png

I am running octorprint behind a https reverse proxy. But loading this resource causes it to become an unsecure page as its loading mixed conent.

to reproduce

Insect the tab with chrome, and cancel a print half way and you see a pnotify toast, and in the network dialog you can see the inscure load of the icon.

@vajonam
Copy link
Author

vajonam commented Apr 14, 2020

Screenshot from 2020-04-13 22-04-11

@FormerLurker
Copy link
Owner

Wow, nice catch! The pnotify js code is loaded by OctoPrint, so do you see the same thing without Octolapse enabled? If not, perhaps I'm using some functionality OctoPrint does not. In any case, I'll look into this and see if I can spot the part that loads this image.

@vajonam
Copy link
Author

vajonam commented Apr 14, 2020

I have not noticed the pnotify errors issues prior to 0.4.0 octolapse. 0.3.4 did not have this issue. It happens when there a toast notification to be shown.

@FormerLurker
Copy link
Owner

I've tracked this down to OctoPrint/src/octoprint/static/js/lib/pnotify/pnotify.desktop.min.js. It looks like that icon is a fallback if one is not specified. I will look for a suitable icon for replacement.

@vajonam
Copy link
Author

vajonam commented Apr 14, 2020 via email

@FormerLurker
Copy link
Owner

Quick update: still trying to deal with this, but haven't had a lot of time. Will be spending time on it over the weekend. Thanks for your patience.

@vajonam
Copy link
Author

vajonam commented May 6, 2020 via email

@FormerLurker FormerLurker added the possible resolution A non-confirmed solution exists for this issue. It may or may not be available on the master branch label May 8, 2020
@FormerLurker
Copy link
Owner

This should be solved in the devel branch. I basically turned all of the desktop notifications off. They are unnecessary anyway. Let me know if you are able to try it out.

@vajonam
Copy link
Author

vajonam commented May 15, 2020

I pulled and installed devel.zip from github, looks good. I don't see issues so far. I will keep an eye out for it. you can close this bug for now. I will re-open if if its not resolved. or something else "pops" up.

@vajonam vajonam closed this as completed May 15, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug possible resolution A non-confirmed solution exists for this issue. It may or may not be available on the master branch Waiting for response
Projects
None yet
Development

No branches or pull requests

2 participants