Mixed Content with WebProxyPortlet

Mixed Content Alert

We are using the Web Proxy Portlet to handle the content for the new fixed content, Staff News, Faculty News, Toolboxes.  The html for these portlets is sourced from web pages on the communications web site and are delivered over http (non-ssl).  The embedded images cause a "mixed content" error in IE.

Cause

We run uPortal configured to trap URLs for embedded images and rewrite them as references to the uPortal proxy servlet (no relation to the proxy portlet).  The proxy servlet supplies the images to the browser by fetching them from the non-ssl site and revending over the ssl session.  Output generated by JSR-168 Portlets bypasses this hook since their output is treated a one opaque object.

Solution

The Web Proxy portlet DOES support proxied binary objects (including images).  All that is needed is to configure the portlet to include a list of URL regular expressions to be proxied.

Fall Back / Short term solutions

  1. Cause the content for the new portlets to be vended over SSL in the first place.
  2. Use CWebProxy instead of the proxy portlet (decision taken to follow this path)

Labels

 
(None)