[IPCK-451] <ice-cc:slider/> + SSL causes non-secure content to be loaded - ICEsoft JIRA Issue Tracker

Details

Type: Bug
Status: Closed
Priority: Major
Resolution: Fixed
Affects Version/s: EE-1.8.2.GA_P05
Fix Version/s: EE-1.8.2.GA_P07
Component/s: Facelet Components
Labels:
None
Environment:
IE9, SSL

Assignee Priority:
P1
Salesforce Case Reference:

Description

The <ice-cc:slider/> composite component is implemented with the YUI library. The generated HTML includes JS from Yahoo CDN (yui.yahooapi.com). When viewed with IE9 + SSL, a security warning prompt appears indicating that non-secure content is being loaded.

The icefaces-enterprise-comps-showcase.war can be used to reproduce the issue. Setting up SSL with Tomcat requires the following:

1. $JAVA_HOME/bin/keytool -genkey -alias tomcat -keyalg RSA

This command will create a new file, in the home directory of the user under which you run it, named ".keystore". To specify a different location or filename, add the -keystore parameter, followed by the complete pathname to your keystore file, to the keytool command shown above.

2. Uncomment the following in Tomcat's server.xml and also add the SSL specific attributes:

<Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true"
               maxThreads="150" scheme="https" secure="true"
               keystoreFile="/Users/apple/.keystore" keystorePass="changeit"
               clientAuth="false" sslProtocol="TLS" />

Options
- Sort By Name
- Sort By Date
- Ascending
- Descending
- Download All

Attachments

ipck-451-IE6.png

20 kB

22/Jul/13 10:10 AM
ipck-451-IE7.png

53 kB

22/Jul/13 10:10 AM
ipck-451-IE8.png

106 kB

22/Jul/13 10:10 AM

Activity

Ascending order - Click to sort in descending order

Tyler Johnson created issue - 12/Jun/13 5:08 PM

Tyler Johnson made changes - 12/Jun/13 5:09 PM

Field	Original Value	New Value
Salesforce Case Reference		5007000000TuqxUAAR

Ken Fyten made changes - 19/Jun/13 4:14 PM

Fix Version/s		EE-1.8.2.GA_P07 [ 10673 ]
Assignee Priority		P2 [ 10011 ]

Hide

Permalink

Philip Breau added a comment - 16/Jul/13 2:31 PM

All content for the slider now served from local, relative paths, which will be transparent for SSL configurations.

Revision: 34943
Author: philip.breau
Date: July-16-13 2:32:43 PM
Message:
~~IPCK-451~~ <ice-cc:slider/> + SSL causes non-secure content to be loaded

Modified : /icepack/trunk/icepack/composite-components/conf/faces-config.xml
Modified : /icepack/trunk/icepack/composite-components/resources/css/common.css
Added : /icepack/trunk/icepack/composite-components/resources/images/slider
Added : /icepack/trunk/icepack/composite-components/resources/images/slider/rail-x.png
Added : /icepack/trunk/icepack/composite-components/resources/images/slider/rail-y.png
Added : /icepack/trunk/icepack/composite-components/resources/images/slider/sprite.png
Added : /icepack/trunk/icepack/composite-components/resources/images/slider/thumb-x.png
Added : /icepack/trunk/icepack/composite-components/resources/js/slider.js
Modified : /icepack/trunk/icepack/composite-components/web/slider/slider.xhtml
Modified : /icepack/trunk/icepack/composite-components/web/theme/_inlineCSS.xhtml
Modified : /icepack/trunk/icepack/samples/composite-comps-showcase/web/WEB-INF/includes/examples/composition-components/sliderDemo.jspx
Added : /icepack/trunk/icepack/samples/composite-comps-showcase/web/images/icefaces-thumb.png

Show

Philip Breau added a comment - 16/Jul/13 2:31 PM All content for the slider now served from local, relative paths, which will be transparent for SSL configurations. Revision: 34943 Author: philip.breau Date: July-16-13 2:32:43 PM Message: IPCK-451 <ice-cc:slider/> + SSL causes non-secure content to be loaded Modified : /icepack/trunk/icepack/composite-components/conf/faces-config.xml Modified : /icepack/trunk/icepack/composite-components/resources/css/common.css Added : /icepack/trunk/icepack/composite-components/resources/images/slider Added : /icepack/trunk/icepack/composite-components/resources/images/slider/rail-x.png Added : /icepack/trunk/icepack/composite-components/resources/images/slider/rail-y.png Added : /icepack/trunk/icepack/composite-components/resources/images/slider/sprite.png Added : /icepack/trunk/icepack/composite-components/resources/images/slider/thumb-x.png Added : /icepack/trunk/icepack/composite-components/resources/js/slider.js Modified : /icepack/trunk/icepack/composite-components/web/slider/slider.xhtml Modified : /icepack/trunk/icepack/composite-components/web/theme/_inlineCSS.xhtml Modified : /icepack/trunk/icepack/samples/composite-comps-showcase/web/WEB-INF/includes/examples/composition-components/sliderDemo.jspx Added : /icepack/trunk/icepack/samples/composite-comps-showcase/web/images/icefaces-thumb.png

Philip Breau made changes - 16/Jul/13 2:31 PM

Status	Open [ 1 ]	Resolved [ 5 ]
Resolution		Fixed [ 1 ]

Hide

Permalink

Carmen Cristurean added a comment - 22/Jul/13 10:09 AM

Verified fix with the icefaces-enterprise-comps-showcase application from the ICEfacesEE-1.8.2.GA_P07-bin.zip binary bundle on iceads1/Public/icefaces-ee.

Test passes in Firefox 21, Chrome27, and IE10; and it fails in IE6, IE7, IE8, and IE9. All these failures are not SSL specific.

IE6: ice-cc:slider component fails to render on demo page (screen shot ipck-IE6.png).

IE7: a JS error occurs on demo page load (screen shot ipck-ie7.png), if clicking 'ok' on it the component fails to render.

IE8: also a JS error on page load (screen shot ipck-ie8.png), the error is:

Message: 'undefined' is null or not an object
Line: 220
Char: 309
Code: 0
URI: https://10.18.39.180:8443/icefaces-enterprise-comps-showcase/block/resource/LTk0MDYyNjI5OA==/

Closing the JS error popup, the component is rendered but cannot be dragged because of other JS errors.

IE9: the demo page renders without any security warnings or JS errors, but dragging the sliders fails to update the values on the page, and the sliders can be dragged far outside of their limits.

Show

Carmen Cristurean added a comment - 22/Jul/13 10:09 AM Verified fix with the icefaces-enterprise-comps-showcase application from the ICEfacesEE-1.8.2.GA_P07-bin.zip binary bundle on iceads1/Public/icefaces-ee. Test passes in Firefox 21, Chrome27, and IE10; and it fails in IE6, IE7, IE8, and IE9. All these failures are not SSL specific. IE6: ice-cc:slider component fails to render on demo page (screen shot ipck-IE6.png). IE7: a JS error occurs on demo page load (screen shot ipck-ie7.png), if clicking 'ok' on it the component fails to render. IE8: also a JS error on page load (screen shot ipck-ie8.png), the error is: Message: 'undefined' is null or not an object Line: 220 Char: 309 Code: 0 URI: https://10.18.39.180:8443/icefaces-enterprise-comps-showcase/block/resource/LTk0MDYyNjI5OA==/ Closing the JS error popup, the component is rendered but cannot be dragged because of other JS errors. IE9: the demo page renders without any security warnings or JS errors, but dragging the sliders fails to update the values on the page, and the sliders can be dragged far outside of their limits.

Carmen Cristurean made changes - 22/Jul/13 10:09 AM

Resolution	Fixed [ 1 ]
Status	Resolved [ 5 ]	Reopened [ 4 ]

Carmen Cristurean made changes - 22/Jul/13 10:10 AM

Attachment		ipck-451-IE6.png [ 16141 ]
Attachment		ipck-451-IE7.png [ 16142 ]
Attachment		ipck-451-IE8.png [ 16143 ]

Ken Fyten made changes - 22/Jul/13 10:22 AM

Assignee Priority

P2 [ 10011 ]

P1 [ 10010 ]

Hide

Permalink

Philip Breau added a comment - 23/Jul/13 10:00 AM

Backported YUI slider version to 3.0 from 3.1 and retested IE.

Revision: 34987
Author: philip.breau
Date: July-22-13 4:14:19 PM
Message:
~~IPCK-451~~ <ice-cc:slider/> + SSL causes non-secure content to be loaded

Modified : /icepack/trunk/icepack/composite-components/resources/css/common.css
Modified : /icepack/trunk/icepack/composite-components/resources/js/slider.js
Modified : /icepack/trunk/icepack/composite-components/web/slider/slider.xhtml
Modified : /icepack/trunk/icepack/composite-components/web/theme/_inlineCSS.xhtml

Show

Philip Breau added a comment - 23/Jul/13 10:00 AM Backported YUI slider version to 3.0 from 3.1 and retested IE. Revision: 34987 Author: philip.breau Date: July-22-13 4:14:19 PM Message: IPCK-451 <ice-cc:slider/> + SSL causes non-secure content to be loaded Modified : /icepack/trunk/icepack/composite-components/resources/css/common.css Modified : /icepack/trunk/icepack/composite-components/resources/js/slider.js Modified : /icepack/trunk/icepack/composite-components/web/slider/slider.xhtml Modified : /icepack/trunk/icepack/composite-components/web/theme/_inlineCSS.xhtml

Philip Breau made changes - 23/Jul/13 10:00 AM

Status	Reopened [ 4 ]	Resolved [ 5 ]
Resolution		Fixed [ 1 ]

Hide

Permalink

Carmen Cristurean added a comment - 23/Jul/13 2:56 PM - edited

Confirmed as fixed with ICEfaces 1.8.2.GA_Build7/Build8 in IE6/7/8/10/FF17/FF21/Chrome27.

Show

Carmen Cristurean added a comment - 23/Jul/13 2:56 PM - edited Confirmed as fixed with ICEfaces 1.8.2.GA_Build7/Build8 in IE6/7/8/10/FF17/FF21/Chrome27.

Ken Fyten made changes - 13/Mar/17 1:33 PM

Status

Resolved [ 5 ]

Closed [ 6 ]

People

Assignee:

Philip Breau

Reporter:

Tyler Johnson

Votes:

0 Vote for this issue

Watchers:

3 Start watching this issue

Dates

Created:

12/Jun/13 5:08 PM

Updated:

13/Mar/17 1:33 PM

Resolved:

23/Jul/13 10:00 AM