Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

FF gives security warning (localhost websocket, mixed-mode connection) #132

Closed
jacogr opened this issue Jul 10, 2018 · 4 comments
Closed
Labels

Comments

@jacogr
Copy link
Member

jacogr commented Jul 10, 2018

From @gnunicorn

image

@jacogr jacogr added this to To Do in @polkadot{.js} via automation Jul 10, 2018
@jacogr
Copy link
Member Author

jacogr commented Jul 10, 2018

And same happens for me, FF 61.0.1

Weirdly enough, doesn't happen in dev mode - so something is amiss with the minification/Babel compilation possibly? (Error pops up somewhere in the React stack)

Not cert related, rather some operation that gives the issue.

@jacogr
Copy link
Member Author

jacogr commented Jul 10, 2018

Ok, so this is the issue - we have a secure page https://polkadot.js.org/apps/ that tries to connect to an insecure websocket - ws://localhost:9944 this is not allowed. While FF does treat localhost as "secure" (mixed-mode) over HTTP, it does not do the same for WebSockets.

Toggling network.websocket.allowInsecureFromHTTPS to true from about:config makes the error disappear.

The above, is probably not recommended, since it overrides the actual browser defaults, but brings it in-line with other browsers such as Chrome which treats ws/http localhost connections on a equal footing.

@jacogr jacogr added this to the As-and-when milestone Sep 13, 2018
This was referenced Oct 24, 2018
@jacogr jacogr changed the title FF gives security warning FF gives security warning (localhost websocket, mixed-mode connection) Jan 10, 2019
@jacogr
Copy link
Member Author

jacogr commented Apr 5, 2019

Closing, cannot be fixed on an app level. (The warning is the best we can do)

@jacogr jacogr closed this as completed Apr 5, 2019
@polkadot{.js} automation moved this from To Do to Done Apr 5, 2019
siman pushed a commit to siman/polkadot-apps that referenced this issue Apr 27, 2019
@polkadot-js-bot
Copy link

This thread has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue if you think you have a related problem or query.

@polkadot-js polkadot-js locked as resolved and limited conversation to collaborators Jun 2, 2021
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
Projects
Development

No branches or pull requests

2 participants