[
https://issues.apache.org/jira/browse/SHINDIG-1870?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13456736#comment-13456736
]
Minh Hoang TO commented on SHINDIG-1870:
----------------------------------------
We got trouble with below templates
"gadgets.jsUriTemplate" : "http://%host%/eXoGadgetServer/gadgets/js/%js%"
"urlTemplate" : "http://%host%/eXoGadgetServer/gadgets/home?{var}"
As we removed the 'http' scheme, our problem was fixed visibly. However, we are
not sure if such removal could cause any side effect.
> Cross-site issue as http scheme is hardcoded in some URI template in
> container.js
> ---------------------------------------------------------------------------------
>
> Key: SHINDIG-1870
> URL: https://issues.apache.org/jira/browse/SHINDIG-1870
> Project: Shindig
> Issue Type: Bug
> Reporter: Minh Hoang TO
>
> Some URI templates defined in container.js has scheme hardcoded as 'http'.
> That leads to cross-site problem as we have Apache Http (configured to use
> with https) in front of Tomcat + Shindig
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira