You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
we used WebYep with our old site which was http only. This worked fine.
Now after upgrading our site to just use SSL (https), we found that WebYep continued to work, but when the pop up editor window would show, we would get just a small textbox and all the rich controls weren't shown.
This was due to a security feature in modern browsers. It appeared that the absolute link for the rich text javascript file was using http as a protocol, while the rest of the page was loading via https. The browser found that this was a security threat and only loaded the editor when you manually confirmed that.
Looking through the code we found the file WYURL.php in webyep-system/programm/lib to contain in line 56 the following code:
else $this->sProtocol = "http";
We understood this to be a default fallback to set the protocol to http when the protocol could not be determined.
We change line 56 into:
else $this->sProtocol = "https";
and found now, that the rich text editor was displayed by the browser without any problem, since it was now called in the HTML page with https. So the whole page was loaded with https.
So far we have not encountered any problems with this small "hack".
Hope this helps.
Have a beautiful day
The text was updated successfully, but these errors were encountered:
Hello,
we used WebYep with our old site which was http only. This worked fine.
Now after upgrading our site to just use SSL (https), we found that WebYep continued to work, but when the pop up editor window would show, we would get just a small textbox and all the rich controls weren't shown.
This was due to a security feature in modern browsers. It appeared that the absolute link for the rich text javascript file was using http as a protocol, while the rest of the page was loading via https. The browser found that this was a security threat and only loaded the editor when you manually confirmed that.
Looking through the code we found the file WYURL.php in webyep-system/programm/lib to contain in line 56 the following code:
We understood this to be a default fallback to set the protocol to http when the protocol could not be determined.
We change line 56 into:
and found now, that the rich text editor was displayed by the browser without any problem, since it was now called in the HTML page with https. So the whole page was loaded with https.
So far we have not encountered any problems with this small "hack".
Hope this helps.
Have a beautiful day
The text was updated successfully, but these errors were encountered: