(RESOLVED) Will it ever be implemented? HTTPS

[Unexpected Item In Bagging Area]

He means this

https://www.blatters.com

[Tonsko]

Yes, the latter. Been around for a while i think, not a a fan of the format.

[George111]

Unexpected Item In Bagging Area said:

He means this

https://www.blatters.com

Ah, not seen that before. Thanks

[PoleDriver]

Started, coded and run by PetrolTed, who has a bit of history of this kind of thing!

[CoolHands]

do you have to be registered to see the forum? Cos I can't see one.

[thebraketester]

Just to bring this thread to a close.

OP. The answer is, NO.

•**TOPIC CLOSED**•

[All that jazz]

CoolHands said:

do you have to be registered to see the forum? Cos I can't see one.

Yes it's one of those stty arrangements where you have to be logged in to view anything. I just don't even bother with such sites.

[DS197]

thebraketester said:

Just to bring this thread to a close.

OP. The answer is, NO.

•**TOPIC CLOSED**•

Thank you my good sir, although I did not see any reason for why you must shout no.

All that jazz said:

Yes it's one of those stty arrangements where you have to be logged in to view anything. I just don't even bother with such sites.

Agreed!

[All that jazz]

Where are the PH Staff? Could it be that they are deliberately avoiding this thread? I note that they are active in other feedback threads.

Where are thou, Racing Pete, Ollie M, PH Dom, Jack Mansfield et al, to assure us that https will be implemented by the end of this month as promised?

[randlemarcus]

While they are copying and pasting the code, could they look at a couple of other bits in the logon page as well?

Google Chrome said:

Refused to load the script 'data:application/javascript;base64,dmFyIHV0YWc9e2xpbms6ZnVuY3Rpb24oKXt9fQ==' because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-inline' http://static.pistonheads.comhttp://tags.tiqcdn.com/utag/haymarket/pistonheads-...http://ad.crwdcntrl.nethttp://widgets.getsitecontrol.comhttp://gscst-84a.kxcdn.com 'unsafe-eval' http://www.google-analytics.com/https://www.google-analytics.com/ ".

head.js:1 Synchronous XMLHttpRequest on the main thread is deprecated because of its detrimental effects to the end user's experience. For more help, check https://xhr.spec.whatwg.org/.
send @ head.js:1
login:1 Refused to load the script 'data:application/javascript;base64,dmFyIHV0YWc9e2xpbms6ZnVuY3Rpb24oKXt9fQ==' because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-inline' http://static.pistonheads.comhttp://tags.tiqcdn.com/utag/haymarket/pistonheads-...http://ad.crwdcntrl.nethttp://widgets.getsitecontrol.comhttp://gscst-84a.kxcdn.com 'unsafe-eval' http://www.google-analytics.com/https://www.google-analytics.com/ ".

login:1 Refused to load the image 'data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAACklEQVR4nGMAAQAABQABDQottAAAAABJRU5ErkJggg==' because it violates the following Content Security Policy directive: "img-src *".

[feef]

https://business.yell.com/knowledge/why-your-websi...

[dmsims]

anonymous said:

[redacted]

Really why on earth would you put FQDN's in ?

<link rel="stylesheet" type="text/css" href="http://static.pistonheads.com/3354/Assets/bundles/uhcss.css" />

    <link rel="stylesheet" href="http://static.pistonheads.com/3354/Assets/bundles/idserverstyles.css" />

<!--[if IE 8]><link href='http://static.pistonheads.com/3354/Assets/css/ie8.css' rel='stylesheet' type='text/css' media='all' /><![endif]-->



    <script type="text/javascript" src="http://static.pistonheads.com/3354/Assets/bundles/head.js"></script>
    <script type="text/javascript" src="http://static.pistonheads.com/3354/Assets/bundles/idserverscripts.js"></script>

<script type="text/javascript" src="//tags.tiqcdn.com/utag/haymarket/pistonheads-sso/prod/utag.sync.js"></script>
<script src="http://static.pistonheads.com/3354/Assets/bundles/uhscripts.js" type="text/javascript"></script>

[GreigM]

dmsims said:

Really why on earth would you put FQDN's in ?

You mean as opposed to relative URLs? I presume it is because www.pistonheads.com is not the same server as static.pistonheads.com, so can't be resolved locally.

I don't really see the problem with that however (apart from the fact that static.pistonheads.com isn't https either).

[feef]

dmsims said:

anonymous said:

[redacted]

Really why on earth would you put FQDN's in ?

<link rel="stylesheet" type="text/css" href="http://static.pistonheads.com/3354/Assets/bundles/uhcss.css" />

    <link rel="stylesheet" href="http://static.pistonheads.com/3354/Assets/bundles/idserverstyles.css" />

<!--[if IE 8]><link href='http://static.pistonheads.com/3354/Assets/css/ie8.css' rel='stylesheet' type='text/css' media='all' /><![endif]-->



    <script type="text/javascript" src="http://static.pistonheads.com/3354/Assets/bundles/head.js"></script>
    <script type="text/javascript" src="http://static.pistonheads.com/3354/Assets/bundles/idserverscripts.js"></script>

<script type="text/javascript" src="//tags.tiqcdn.com/utag/haymarket/pistonheads-sso/prod/utag.sync.js"></script>
<script src="http://static.pistonheads.com/3354/Assets/bundles/uhscripts.js" type="text/javascript"></script>

What's to say the code isn't being generated dynamically?

[768]

Does that make a difference?

[Tankrizzo]

feef said:

What's to say the code isn't being generated dynamically?

Given what we know about the failings of the current site, and it's written in Classic, I'd find that highly unlikely.

[dmsims]

feef said:

dmsims said:

anonymous said:

[redacted]

Really why on earth would you put FQDN's in ?

<link rel="stylesheet" type="text/css" href="http://static.pistonheads.com/3354/Assets/bundles/uhcss.css" />

    <link rel="stylesheet" href="http://static.pistonheads.com/3354/Assets/bundles/idserverstyles.css" />

<!--[if IE 8]><link href='http://static.pistonheads.com/3354/Assets/css/ie8.css' rel='stylesheet' type='text/css' media='all' /><![endif]-->



    <script type="text/javascript" src="http://static.pistonheads.com/3354/Assets/bundles/head.js"></script>
    <script type="text/javascript" src="http://static.pistonheads.com/3354/Assets/bundles/idserverscripts.js"></script>

<script type="text/javascript" src="//tags.tiqcdn.com/utag/haymarket/pistonheads-sso/prod/utag.sync.js"></script>
<script src="http://static.pistonheads.com/3354/Assets/bundles/uhscripts.js" type="text/javascript"></script>

What's to say the code isn't being generated dynamically?

Is that a serious question?

[Tankrizzo]

anonymous said:

[redacted]

Nothing, especially if you're using it as a CDN which it looks like they are.

[dmsims]

I should have been more specific

IF

src=//

had been used switching to https would have been an (even more) trivial task

[768]

That's just a 2 second sed replacement.

Mind you, I can't think of any one involved with this that should take much more time.