Skip to content

Instantly share code, notes, and snippets.

@spinda

spinda/issue.md

Last active January 24, 2016 05:44
Show Gist options
  • Save spinda/b83b5ca2af74f44b2227 to your computer and use it in GitHub Desktop.
Save spinda/b83b5ca2af74f44b2227 to your computer and use it in GitHub Desktop.
Download ZIP
Bootstrap Themes Issue
Raw
issue.md

broken

Loading http://themes.getbootstrap.com/products/application works fine, but https://themes.getbootstrap.com/products/application doesn't.

From the preview page:

<iframe class="iframe-preview js-iframe" src="//bootstrap-themes.github.io/application"></iframe>

With HTTPS, this tries to load https://bootstrap-themes.github.io/application.

$ curl -I "https://bootstrap-themes.github.io/application"
HTTP/1.1 301 Moved Permanently
Server: GitHub.com
Content-Type: text/html
Location: http://bootstrap-themes.github.io/application/
<snip>

Since "application" is a directory, github.io tries to redirect /application to /application/. But for whatever reason, the responding server hardcodes http:// in the Location header, instead of matching the same protocol as the original request. I've tested this on Firefox and Chrome, and both refuse to load a page served over HTTP into an iframe embedded in a page served over HTTPS, due to the mixed content restriction.

Solution: change the src of the iframe to //bootstrap-themes.github.io/application/. This avoids the bad redirect.

fixed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment