Sérgio Lemos created AMQ-9739:
---------------------------------

             Summary: Web Console assets fail to load when not using HTTPS
                 Key: AMQ-9739
                 URL: https://issues.apache.org/jira/browse/AMQ-9739
             Project: ActiveMQ Classic
          Issue Type: Improvement
          Components: Web Console
    Affects Versions: 6.1.7
            Reporter: Sérgio Lemos


As part of the changes in https://issues.apache.org/jira/browse/AMQ-9697 I 
added "upgrade-insecure-requests" to the Content-Security-Policy header. This 
policy caused CSS and images to fail to load when not running the Web Console 
over HTTPS.

 

When using the Safari browser, the console shows the errors:

"[Error] Failed to load resource: An SSL error has occurred and a secure 
connection to the server cannot be made. (head.css, line 0)
[Error] Failed to load resource: An SSL error has occurred and a secure 
connection to the server cannot be made. (common.js, line 0)
[Error] Failed to load resource: An SSL error has occurred and a secure 
connection to the server cannot be made. (css.js, line 0)
[Error] Failed to load resource: An SSL error has occurred and a secure 
connection to the server cannot be made. (standardista-table-sorting.js, line 0)
[Error] Failed to load resource: An SSL error has occurred and a secure 
connection to the server cannot be made. (prettify.js, line 0)
[Error] Failed to load resource: An SSL error has occurred and a secure 
connection to the server cannot be made. (head.js, line 0)"

 

Apparently Chrome is able to handle it correcly.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
For further information, visit: https://activemq.apache.org/contact


Reply via email to