Opened 8 years ago

Closed 8 years ago

#4065 closed Bug (fixed)

SCAYT doesn't work with SSL

Reported by: Artur Formella Owned by:
Priority: Normal Milestone:
Component: UI : Spell Checker Version:
Keywords: Review+ Cc: WebSpellChecker.net, alexander_jared@…

Description

SCAYT doesn't work with SSL.

<script type="text/javascript" src="https://svc.spellchecker.net/spellcheck/lf/scayt/scayt1.js">

Failed to load source for: https://svc.spellchecker.net/spellcheck/lf/scayt/scayt1.js

</script>

Attachments (1)

4065.patch (766 bytes) - added by Artur Formella 8 years ago.

Download all attachments as: .zip

Change History (11)

comment:1 Changed 8 years ago by Frederico Caldeira Knabben

Cc: WebSpellChecker.net added

Changed 8 years ago by Artur Formella

Attachment: 4065.patch added

comment:2 Changed 8 years ago by Artur Formella

Keywords: Review? added

I was wondering about security of this plugin. The content is sent to third parties.

My suggestion is to disable it in this case.

comment:3 Changed 8 years ago by Frederico Caldeira Knabben

Keywords: Review- added; Review? removed

Security has nothing to do with this ticket. We must simply make it work under HTTPS. I'm afraid this is a SpellChecker.net issue.

comment:4 Changed 8 years ago by Frederico Caldeira Knabben

Keywords: Confirmed added; Review- removed
Milestone: CKEditor 3.0

I have received the confirmation form SpellChecker.net. This is to be fixed at their side with no changes to our code.

comment:5 Changed 8 years ago by WebSpellChecker.net

Resolution: fixed
Status: newclosed

Fixed.

comment:6 Changed 8 years ago by Zack Peterson

I've got a CKEditor control on an HTTPS/SSL web page. I just today enabled the SCAYT feature and now see a Security Warning when the page loads.

It seems to be caused by these four files:

http://svc.spellchecker.net/spellcheck31/lf/scayt/_base.xd.js http://svc.spellchecker.net/spellcheck31/lf/scayt/nls/caption.xd.js http://svc.spellchecker.net/spellcheck31/lf/scayt/lang_list.js http://svc.spellchecker.net/spellcheck31/lf/scayt/resources/blank.gif

According to this ticket, SpellChecker.net corrected the problem from their end 12 days ago.

Why do I still see the warning form my web site? Do I need to apply that 4065.patch?

comment:7 in reply to:  6 Changed 8 years ago by Frederico Caldeira Knabben

Resolution: fixed
Status: closedreopened

Replying to Zack Peterson:

Why do I still see the warning form my web site?

I would ask SpellChecker.net to please comment on this.

comment:8 Changed 8 years ago by Jared

Cc: alexander_jared@… added

i have encountered the same issue and are interested in knowing how to access the SpellChecker.net resources over https.

comment:9 Changed 8 years ago by WebSpellChecker.net

Keywords: Review? added; Confirmed removed

Fixed on the SpellChecker.net side.

comment:10 Changed 8 years ago by Alfonso Martínez de Lizarrondo

Keywords: Review+ added; Review? removed
Resolution: fixed
Status: reopenedclosed

Now works correctly in IE. Firefox has this problem #5259 not related to SpellChecker

Note: See TracTickets for help on using tickets.
© 2003 – 2017 CKSource – Frederico Knabben. All rights reserved. | Terms of use | Privacy policy