Issue 504 in simile-widgets: Timeline blocked by Firefox when used on SSL-based sites.

[codesite...@google.com]

Status: New
Owner: ----
Labels: Type-Defect Priority-Medium

New issue 504 by static...@gmail.com: Timeline blocked by Firefox when used
on SSL-based sites.
http://code.google.com/p/simile-widgets/issues/detail?id=504

When including Simile Timeline in a site running on SSL, the timeline API
is blocked by the browser.

First step taken to mitigate this was to load the timeline-api.js at its
SSL URL: <script type="text/javascript"
src="https://api.simile-widgets.org/timeline/2.3.1/timeline-api.js?bundle=true"></script>

Unfortunately, it breaks when timeline-api.js attempts to load additional
JS files over http://

This cascades, and prevents the Timeline API from loading at all.

Output from Firebug on Firefox 27:

Blocked loading mixed active
content "http://api.simile-widgets.org/ajax/2.2.1/simile-ajax-api.js"
timeli...le=true (line 270)
document.write("<script src='" + url + "'
type='text/javascript'></script>");

Blocked loading mixed active
content "http://api.simile-widgets.org/ajax/2.2.1/simile-ajax-api.js"
timeli...le=true (line 270)
document.write("<script src='" + url + "'
type='text/javascript'></script>");

ReferenceError: Timeline is not defined result...te=1970 (line 578)
var eventSource1 = new Timeline.DefaultEventSource();


--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings

[codesite...@google.com]

Comment #1 on issue 504 by bor...@gmail.com: Timeline blocked by Firefox

when used on SSL-based sites.
http://code.google.com/p/simile-widgets/issues/detail?id=504

I had this issue as well when loading the bundle over https.
They need to fix this, and the fix is rather simple...
In the file: timeline-api.js, at line 257 which reads:

"http://api.simile-widgets.org/ajax/2.2.1/simile-ajax-api.js"

should be changed to:

"//api.simile-widgets.org/ajax/2.2.1/simile-ajax-api.js"

(remove the "http:" prefix and let the URL be constructed based on whatever
current protocol is being used to load that page)