<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="padding-bottom: 10px; padding-top: 5px;">
<div style="padding:12px; border:1px solid #8D3970; background-color:#F7F9FA; color:#8D3970; font-size:14px; line-height:22px; font-family: Calibri, Arial, Helvetica, sans-serif;">
<strong>CAUTION:</strong> This e-mail originated outside the University of Southampton.
</div>
</div>
<div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
I thought​ that I resolved all of the "mixed content" warnings on our repository a while back, but after a recent upgrade from 3.3.12 to 3.4.3, I noticed that I have some mixed content warnings again, specifically on the thumbnails on the abstract pages. I
might have missed some of these warning before, though, so this might not be a new issue after the upgrade. </div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Because I have HSTS headers, the browser redirects those those requests to HTTPS, but I would like to fix it. Both the SRC and the HREF of the thumbnails for PDFs are referenced as HTTP instead of HTTPS. The only thing that fixed it during my testing was
if I was to remove (comment out) " the <span style="background-color:rgb(255, 255, 255);display:inline !important">$c->{host}<span> </span></span> line/ariable in 10_core.pl</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
That resolves the issue, but I'm worried to apply this change because I don't know if something else might rely on that variable.</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
I spent a good part of a day trying to follow the code, and I know that the {scheme} variable in URL.pm doesn't get properly set to https in the case of the thumbnails, but the code is so confusing when it comes to the thumbnail URLs that I can't figure out
why. I do have a suspicion that there is a bug in the core code somewhere, but perhaps it is something in our own configuration. </div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
I know this issue is not new to this list, in fact, I wrote the first drafts of the HSTS page on the Wiki (<a href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwiki.eprints.org%2Fw%2FHTTPS-only_and_HSTS&data=04%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C4e617d4bcc384f2b8cca08d9c669aaeb%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637758980060860805%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=nPQZMyTKzS6rnJpqBXbdH%2BkRO2CD14ecgHo4upT%2Bui0%3D&reserved=0" originalSrc="https://wiki.eprints.org/w/HTTPS-only_and_HSTS" shash="y1c/JN7fGA/23MtP/4i8xJUJoGIEQrpKMU/Arvzyws2n1l17+UhoyCkwS2Y7z5XZCr2/Wo+Gb5AVb5DHrliWO/LgvLIDJKnyToIhgwWqWjhzsMaYVaWR+5lvgYenQ7+dQlGWGMOqRyOKp6QrSXp+wkw+s8xe3IBc0ACOCOTQ5zk=" id="LPNoLPOWALinkPreview">https://wiki.eprints.org/w/HTTPS-only_and_HSTS</a>), but looking through
the updated page there and any recent exchanges that relate to this didn't help me figure it out. </div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Let me know if you have any ideas?</div>
<div class="_Entity _EType_OWALinkPreview _EId_OWALinkPreview _EReadonly_1"></div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Best wishes,
<div>Tomasz</div>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div>
<div id="Signature">
<div>
<div name="divtagdefaultwrapper" style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:; margin:0">
<div style="font-family:Tahoma; font-size:13px"></div>
</div>
</div>
</div>
</div>
</div>
</body>
</html>