Webclient "Blocked Insecure Content"

Forum to discuss the Web client version of Servoy.

Webclient "Blocked Insecure Content"

Postby grahamg » Mon Jul 29, 2019 9:46 am

Servoy 7.4.x

Have a client concerned at Browser "Content Blocked" warnings when using Print Preview - also appears when using the Forum see screenshot.

Solution is using https and shows as secure but people are understandably reluctant to click on the "Load unsafe Scripts" option.

Could not find anything previously on the Forum and welcome suggestions on how others are handling this.

Thanks
You do not have the required permissions to view the files attached to this post.
Graham Greensall
Worxinfo Ltd
www.worxinfo.com
grahamg
 
Posts: 752
Joined: Fri Oct 03, 2003 3:15 pm
Location: Midlands UK

Re: Webclient "Blocked Insecure Content"

Postby mboegem » Mon Jul 29, 2019 11:13 am

Hi Graham,

your customer is getting these warnings, because at that point a page is loaded with scripts that, most likely, use unsafe http connections.
The main page might be secured with a certificate, but scripts could load content over unsafe http connection.

In order to find the source of these messages: open the inspector in Chrome, navigate to the 'Network' tab and then see which resources are (trying to be) loaded over http. (They probably appear in red)

This problem might even be some script outside of your application as it can be a Chrome extension that injects a script in each page, which then is trying to load other resources over http.
Try the inspector and you'll find out very soon :-)

Hope this helps
_____________________
Marc Boegem
Solutiative / JBS Group, Partner
• Servoy Certified Developer
• Servoy Valued Professional
• Freelance SAN Developer

Image
User avatar
mboegem
 
Posts: 1528
Joined: Sun Oct 14, 2007 1:34 pm
Location: Amsterdam

Re: Webclient "Blocked Insecure Content"

Postby grahamg » Mon Jul 29, 2019 11:33 pm

Thanks Marc - great advice from you as always :)

Mixed Content: The page at 'https://xxxx.worxinfo.com/servoy-webclient/application/s/sdlt.3.1' was loaded over HTTPS, but requested an insecure resource 'http://xxxx.worxinfo.com/servoy-webclient/resources/servoy/resources'. This request has been blocked; the content must be served over HTTPS.


However, I'm not sure how to resolve this as the offending function is simply to [Print Preview] - all code & forms are on the Servoy Server - but there is a "http://......../servoy-webclient/resources/servoy/resources" call that I presume is made internally by Servoy?

Does anyone know how to change the 'http://....' call to 'https://..."?


Thanks
Graham
Graham Greensall
Worxinfo Ltd
www.worxinfo.com
grahamg
 
Posts: 752
Joined: Fri Oct 03, 2003 3:15 pm
Location: Midlands UK

Re: Webclient "Blocked Insecure Content"

Postby rmcneilly » Fri Feb 07, 2020 6:35 am

Hello Graham,
Were you able to solve this issue?
A common thread seems to be that there's usually a proxy involved. Maybe a transparent one.

Regards,
Richard.
rmcneilly
 
Posts: 2
Joined: Fri Jan 10, 2020 7:32 pm

Re: Webclient "Blocked Insecure Content"

Postby grahamg » Sat Feb 08, 2020 4:54 pm

Hi Richard

Short answer - No.

The offending 'http' calls are generated by Servoy so no control over them. I reverted to generating the PDF's and saving in a docs table with button for Users to download. A few extra clicks but not really a big deal.

Graham
Graham Greensall
Worxinfo Ltd
www.worxinfo.com
grahamg
 
Posts: 752
Joined: Fri Oct 03, 2003 3:15 pm
Location: Midlands UK

Re: Webclient "Blocked Insecure Content"

Postby Harjo » Mon Feb 10, 2020 10:16 am

Dd you file a bug report?
Because I think that is bug in Servoy!
Harjo Kompagnie
Direct ICT / Servoy Hosting / ServoyCamp
Servoy Certified Developer
Servoy Valued Professional
SAN Developer
User avatar
Harjo
 
Posts: 4307
Joined: Fri Apr 25, 2003 11:42 pm
Location: DEN HAM OV, The Netherlands

Re: Webclient "Blocked Insecure Content"

Postby jcompagner » Tue Feb 11, 2020 3:34 pm

the server is behind a proxy?
so the https (tls/ssl) is handled by something else?

Then servoy doesnt directly know what it should do if we need to generate a full url. The proxy has to set certain stuff like X-Forwarded-Scheme or Forwarded where the scheme is a part of.

That we we know that we need to generate a https url instead of http.
Johan Compagner
Servoy
User avatar
jcompagner
 
Posts: 8248
Joined: Tue May 27, 2003 7:26 pm
Location: The Internet

Re: Webclient "Blocked Insecure Content"

Postby grahamg » Sun Feb 16, 2020 1:49 pm

Hi Johan

It's a WebClient-only system on one of Harjo's Servers - he is better placed than me to describe how the setup might interact with Servoy.

Given the move of all Browsers towards requiring https would it be better if Servoy now defaulted to this? I would not have thought there were many circumstances that required a non-secure connection.
Graham Greensall
Worxinfo Ltd
www.worxinfo.com
grahamg
 
Posts: 752
Joined: Fri Oct 03, 2003 3:15 pm
Location: Midlands UK

Re: Webclient "Blocked Insecure Content"

Postby jcompagner » Mon Feb 17, 2020 10:13 am

we can't default to this
the proxy/firewall before a servoy tomcat must give this information to us.
But besides that we also have a setting on the admin page "servoy.X-Forwarded-Proto" that can set this info
Johan Compagner
Servoy
User avatar
jcompagner
 
Posts: 8248
Joined: Tue May 27, 2003 7:26 pm
Location: The Internet

Re: Webclient "Blocked Insecure Content"

Postby grahamg » Mon Feb 17, 2020 11:23 am

But besides that we also have a setting on the admin page "servoy.X-Forwarded-Proto" that can set this info


Maybe I need another coffee - but can't see this on Admin or Network Settings. Is this to keep it out of the hands of people who might be dangerous using it :D
Graham Greensall
Worxinfo Ltd
www.worxinfo.com
grahamg
 
Posts: 752
Joined: Fri Oct 03, 2003 3:15 pm
Location: Midlands UK

Re: Webclient "Blocked Insecure Content"

Postby jcompagner » Mon Feb 17, 2020 12:00 pm

no because you are on a very old version of Servoy...
Johan Compagner
Servoy
User avatar
jcompagner
 
Posts: 8248
Joined: Tue May 27, 2003 7:26 pm
Location: The Internet


Return to Servoy Web Client

Who is online

Users browsing this forum: No registered users and 3 guests