[
https://issues.apache.org/jira/browse/AMQ-9739?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18015464#comment-18015464
]
ASF subversion and git services commented on AMQ-9739:
------------------------------------------------------
Commit 35197b44c51c4d93c2e1f6bf548fe8282a4e3586 in activemq's branch
refs/heads/main from Sérgio Lemos
[ https://gitbox.apache.org/repos/asf?p=activemq.git;h=35197b44c5 ]
AMQ-9739: Removed "upgrade-insecure-requests" from the Web Console's
Content-Security-Policy header. (#1472)
Fixes issues loading assets when serving the Web Console via HTTP.
> Web Console assets fail to load when not using HTTPS
> ----------------------------------------------------
>
> Key: AMQ-9739
> URL: https://issues.apache.org/jira/browse/AMQ-9739
> Project: ActiveMQ Classic
> Issue Type: Bug
> Components: Web Console
> Affects Versions: 6.1.7
> Reporter: Sérgio Lemos
> Assignee: Jean-Baptiste Onofré
> Priority: Major
> Fix For: 6.2.0, 6.1.8
>
> Time Spent: 0.5h
> Remaining Estimate: 0h
>
> As part of the changes in https://issues.apache.org/jira/browse/AMQ-9697 I
> added "upgrade-insecure-requests" to the Content-Security-Policy header. This
> policy caused CSS and images to fail to load when not running the Web Console
> over HTTPS.
>
> When using the Safari browser, the console shows the errors:
> "[Error] Failed to load resource: An SSL error has occurred and a secure
> connection to the server cannot be made. (head.css, line 0)
> [Error] Failed to load resource: An SSL error has occurred and a secure
> connection to the server cannot be made. (common.js, line 0)
> [Error] Failed to load resource: An SSL error has occurred and a secure
> connection to the server cannot be made. (css.js, line 0)
> [Error] Failed to load resource: An SSL error has occurred and a secure
> connection to the server cannot be made. (standardista-table-sorting.js, line
> 0)
> [Error] Failed to load resource: An SSL error has occurred and a secure
> connection to the server cannot be made. (prettify.js, line 0)
> [Error] Failed to load resource: An SSL error has occurred and a secure
> connection to the server cannot be made. (head.js, line 0)"
>
> Apparently Chrome is able to handle it correcly.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@activemq.apache.org
For additional commands, e-mail: issues-h...@activemq.apache.org
For further information, visit: https://activemq.apache.org/contact
