[ 
https://issues.apache.org/jira/browse/SAMZA-389?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14107019#comment-14107019
 ] 

Chris Riccomini commented on SAMZA-389:
---------------------------------------

Ah yes, I can reproduce this.

If I remove the 's' in https, then the problem goes away. Definitely seems like 
an XSS issue.

> Website has XMLHttpRequest cannot load error
> --------------------------------------------
>
>                 Key: SAMZA-389
>                 URL: https://issues.apache.org/jira/browse/SAMZA-389
>             Project: Samza
>          Issue Type: Bug
>            Reporter: Yan Fang
>
> As a result, the versioned pages will not load the switch-version icon. Check 
> the browser, you will see 
> {code}
> XMLHttpRequest cannot load 
> http://samza.incubator.apache.org/startup/hello-samza/0.7.0/index.html. No 
> 'Access-Control-Allow-Origin' header is present on the requested resource. 
> Origin 'https://samza.incubator.apache.org' is therefore not allowed access. 
> {code}



--
This message was sent by Atlassian JIRA
(v6.2#6252)

Reply via email to