Hello,

I don't think there's much that can be done about this on the JSmol code
side, but I wanted to report that, of the three search options supported by
JSmol, two of them (NCI and RCSB) fail when your application is deployed on
an HTTPS site. This is because cactus.nci.nih.gov and rcsb.org have no
HTTPS side of the site, so all your requests will fail due to the
same-origin policy.

As far as I know, there aren't any easy ways of circumventing this (for
good reason), so if you're putting JSmol on HTTPS you'll just have to deal
with this for now. Removing HTTPS is not an option, our website is on a
server controlled by the federal government, and HTTPS is now required.

I've already tried to contact the Cactus administrators to get HTTPS, which
they should be doing anyway given the requirement. Can anyone in this list
help with the RCSB folk? I know getting an SSL cert is not trivial (at
least until https://letsencrypt.org/ goes up in a few weeks), but it's
something to think about.

Thankfully, PubChem has an HTTPS version of the site, which is
automatically redirecting JSmol's requests. This is probably a good sign
for Cactus support soon.

If you're running JSmol on an HTTP site, this should not be a problem.

--Vinushka
------------------------------------------------------------------------------
_______________________________________________
Jmol-users mailing list
Jmol-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/jmol-users

Reply via email to