[ 
https://issues.apache.org/jira/browse/SHINDIG-1870?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13456741#comment-13456741
 ] 

Minh Hoang TO commented on SHINDIG-1870:
----------------------------------------

We got trouble with OpenSocial API as the URL of AjaxRequest is built with 
following templates

  "opensocial" : {
    // Path to fetch opensocial data from
    // Must be on the same domain as the gadget rendering server
    "path" : "http://%host%/social/rpc";,

By removing the 'http' scheme, our cross-site issue is fixed but we are not 
sure if such change could lead to any side effect
                
> Cross-site issue as http scheme is hardcoded in some URI template in 
> container.js
> ---------------------------------------------------------------------------------
>
>                 Key: SHINDIG-1870
>                 URL: https://issues.apache.org/jira/browse/SHINDIG-1870
>             Project: Shindig
>          Issue Type: Bug
>            Reporter: Minh Hoang TO
>
> Some URI templates defined in container.js has scheme hardcoded as 'http'. 
> That leads to cross-site problem as we have Apache Http (configured to use 
> with https) in front of Tomcat + Shindig

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Reply via email to