Opened 11 years ago
Last modified 10 years ago
#11313 confirmed Bug
Mathjax plugin broken when ckeditor is used over https:// protocol
Reported by: | Boson Au | Owned by: | |
---|---|---|---|
Priority: | Normal | Milestone: | |
Component: | General | Version: | 4.3 Beta |
Keywords: | Cc: |
Description
Steps:
- instantiate ckeditor with mathjax plugin installed using https protocol.
- clicking mathjax throws error in console:
Chrome:"[blocked] The page at '[site with https]' was loaded over HTTPS, but ran insecure content from 'http://cdn.mathjax.org/mathjax/2.2-latest/MathJax.js?config=TeX-AMS_HTML': this content should also be loaded over HTTPS."
in Firefox: "[14:41:12.367] Blocked loading mixed active content "http://cdn.mathjax.org/mathjax/2.2-latest/MathJax.js?config=TeX-AMS_HTML" @ https://[site]"
os:pc/mac
browser:chrome
according to the Mathjax website: http://www.mathjax.org/resources/faqs/#problem-https
their CDN does not offer https support and instead, asks users to use https://c328740.ssl.cf1.rackcdn.com/mathjax/latest/MathJax.js?config=TeX-AMS-MML_HTMLorMML as an alternative address. It'd be great if ckeditor can test the protocol of the browser accessing the script and change the path accordingly. even better would be leaving plugin.js in the mathjax plugin folder as it was in version 4.3 beta.
Change History (3)
comment:1 Changed 11 years ago by
Status: | new → confirmed |
---|---|
Summary: | Mathjax plugin broken when ckeditor is used over https:// protocol + chrome → Mathjax plugin broken when ckeditor is used over https:// protocol |
Version: | 4.3.1 → 4.3 Beta |
comment:2 Changed 10 years ago by
It looks like mathjax's cdn works with https now. https://cdn.mathjax.org/mathjax/2.2-latest/MathJax.js?config=TeX-AMS_HTML works for me.
This isn't only Chrome. Firefox blocks mathjax as well while IE asks if it should display content or not (IE default setting).
Problem can be reproduced from CKEditor 4.3 beta.
I think it would be best if we could detect protocol (http://stackoverflow.com/questions/4723213/detect-http-or-https-then-force-https-in-javascript) and call correct URL.