Hi,

Thanks for looking into this.

I should clarify what I meant, though: I did not mean "embed" as in using the embed tag or an iframe, I just meant a simple <img> tag. Here's a test page I mocked up:
http://asimweb.org/~asim/imgur.html

The http version is still broken when the rule is enabled.

I apologize for not including this example earlier.

--Nick

On 8/4/2014 12:36 PM, Bryn Mosher wrote:
I should clarify a little. The existing embeds in the wild may still live with a hart-coded http URL (and thus fail). Any new embeds that get created will not specify protocol. If anyone is maintaining a site with embeds already, all they need to do is remove the proto ("http:") from the iframe src in the embed.


On Mon, Aug 4, 2014 at 12:25 PM, Yan Zhu <[email protected] <mailto:[email protected]>> wrote:

    Bryn says Imgur will have a fix out either today or tomorrow.

    yay!

    On 07/31/2014 06:06 PM, Bryn Mosher wrote:
    > Thanks! I'll see if I can reproduce with the extension and try
    to get it
    > resolved.
    >
    > On Jul 31, 2014 5:45 PM, "Yan Zhu" <[email protected]
    <mailto:[email protected]> <mailto:[email protected] <mailto:[email protected]>>> wrote:
    >
    >     + Bryn of Imgur, who added the ruleset.
    >
    >     On 07/31/2014 05:18 PM, Nicholas Bendler wrote:
    >     > Hi all,
    >     >
    >     > A few days to a week ago, I noticed that on several sites
    embedded
    >     imgur
    >     > images would no longer load. I used the httpfox extension
    to see that
    >     > imgur URLs were being 302-redirected to the image page,
    thus the image
    >     > embed fails. This is a known imgur behavior for
    high-traffic referers
    >     > like Facebook, but I was seeing this everywhere. I could
    not reproduce
    >     > the issue with CURL and some test refers. I also tried
    modifying
    >     CURL's
    >     > user-agent string (I use Pale Moon instead of Firefox) but
    that
    >     did not
    >     > make a difference, either - I was still getting the actual
    image. Back
    >     > in my browser, I disabled the HTTPS Everywhere rule for imgur,
    >     reloaded
    >     > a test page, and it worked again.
    >     >
    >     > I am using https-everywhere 3.5.3.
    >     >
    >     > --Nick
    >     >
    >     >
    >     > _______________________________________________
    >     > HTTPS-Everywhere mailing list
    >     > [email protected]
    <mailto:[email protected]>
    <mailto:[email protected]
    <mailto:[email protected]>>
    >     > https://lists.eff.org/mailman/listinfo/https-everywhere
    >     >
    >
    >
    >     --
    >     Yan Zhu  <[email protected] <mailto:[email protected]>
    <mailto:[email protected] <mailto:[email protected]>>>, <[email protected]
    <mailto:[email protected]>
    >     <mailto:[email protected] <mailto:[email protected]>>>
    >     Staff Technologist
    >     Electronic Frontier Foundation https://www.eff.org
    >     815 Eddy Street, San Francisco, CA  94109 +1 415 436 9333
    x134 <tel:%2B1%20415%20436%209333%20x134>
    >     <tel:%2B1%20415%20436%209333%20x134>
    >


    --
    Yan Zhu  <[email protected] <mailto:[email protected]>>, <[email protected]
    <mailto:[email protected]>>
    Staff Technologist
    Electronic Frontier Foundation https://www.eff.org
    815 Eddy Street, San Francisco, CA  94109 +1 415 436 9333 x134
    <tel:%2B1%20415%20436%209333%20x134>




--
-Bryn Mosher
Engineer, Imgur


_______________________________________________
HTTPS-Everywhere mailing list
[email protected]
https://lists.eff.org/mailman/listinfo/https-everywhere

Reply via email to