Bill Gaske
  • Posts: 2
  • Joined: 04/06/2012
I just ran up an new instance of YAF 1.9.6.1 using a valid certificate and am running it over https.

In the Current Board Settings I have unchecked “Use Google Hosted CDN jQuery UI CSS File?” and have also changed the app.config setting for YAF.BaseUrlMask as below:

<add key="YAF.BaseUrlMask" value="https://<my server dns name>" />

When navigating my YAF instance over https I am getting the warning “Do you want to view only the webpage content that was delivered securely” because there are rewquest from my browser that look like:

Http Request: GET /ajax/libs/jqueryui/1/jquery-ui.min.js

I do not want to work around this issue with browser settings.

How can I get the ajax GET request to be made over Https?

Are there any other areas of YAF that need to be changed because of similar issues?
Sponsor
tha_watcha
  • Posts: 4080
  • Joined: 06/03/2010
You can change that url in the app.config of yaf

<
add key="YAF.JQueryUIFile" value="https://ajax.googleapis.com/ajax/libs/jqueryui/1/jquery-ui.min.js" />


and also

<add key="YAF.JQueryUILangFile" value="https://ajax.googleapis.com/ajax/libs/jqueryui/1.8.16/i18n/jquery-ui-i18n.min.js" />

UserPostedImage
Bill Gaske
  • Posts: 2
  • Joined: 04/06/2012
Thanks so much, this worked and is exactly what I needed.
ocortez
  • Posts: 6
  • Joined: 31/01/2013
Hi,

I too have the same issue with ssl. I changed the app.config and the forum settings but still get

SEC7111: HTTPS security is compromised by http://ajax.googleapis.c...eryui/1/jquery-ui.min.js 
yaf_admin_boardsettings.aspx


Any ideas?

Thanks,
Ozzy
tha_watcha
  • Posts: 4080
  • Joined: 06/03/2010
Did you changed both app settings. I edited my post the code blocks where broken before and shown only one setting.
UserPostedImage
ocortez
  • Posts: 6
  • Joined: 31/01/2013
I don't follow....what do you mean both app settings? This is what my app.config looks like

<appSettings>
<!--
******************************************************************
** ConfigPassword Key ** Defaults to: Empty (not installed) **

Password to run configuration (/install/default.aspx) for the forum.
If you cannot set write permissions on this file (app.config)
you can manually enter a plain text password here that will
be required when you attempt to run the configuration. Install/config
password is required for security reasons.
-->
<add key="YAF.ConfigPassword" value="123456" />

<!--
******************************************************************
** BoardID Key ** Defaults to: 1 **

You can create as many boards as you want and they will function as seperate
forums (with seperate users). (Admin->Boards to create new boards.)
You can also specify "BoardID" in the forum control:

<YAF:Forum ID="Forum1" runat="server" BoardID="2" />

-->
<add key="YAF.BoardID" value="1" />

<!--
******************************************************************
** EnableURLRewriting Key ** Defaults to: false **

For advanced users who need SEO-quality URLs on their forum. If
you don't know what SEO is, you probably don't need to enable.
-->
<add key="YAF.EnableURLRewriting" value="true" />

<!--
******************************************************************
** URLRewritingMode Key ** Defaults to: false **
Unicode - will replace url symbols with unicode characters
Translit - will replace unicode characters with ascii characters
no entry - will replace non-ascii symbols with dashes
For advanced users who need SEO-quality URLs on their forum. If
you don't know what SEO is, you probably don't need to enable.

-->
<add key="YAF.URLRewritingMode" value="Translit" />

<!--
******************************************************************
** SMTP SSL Key ** Defaults to: false **

Set to true to use SSL for SMTP server connections.
-->
<add key="YAF.UseSMTPSSL" value="false" />

<!--
******************************************************************
** databaseObjectQualifier Key ** Defaults to: yaf_ **

For advanced users who want to change the prefix for Yaf DB
structure.
-->
<add key="YAF.DatabaseObjectQualifier" value="yaf_" />

<!--
******************************************************************
** DatabaseOwner Key ** Defaults to: dbo **

For advanced users who want to the change the default permissions
for the YAF DB structure.
-->
<add key="YAF.DatabaseOwner" value="dbo" />

<!--
******************************************************************
** ConnectionStringName Key ** Defaults to: yafnet **

The Database Connection string name YAF should use. Defaults
to "yafnet" for backward compatibility.
-->
<add key="YAF.ConnectionStringName" value="yafnet" />

<!-- Used to override a default provider
<add key="YAF.MembershipProvider" value="YafMembershipProvider" />
<add key="YAF.RoleProvider" value="YafRoleProvider" />
<add key="YAF.ProviderProvider" value="YafProfileProvider" />
-->

<!--
*******************************************************************
Used for Url Rewriting - default is "default.aspx"
<add key="YAF.BaseScriptFile" value="default.aspx" />
-->

<!--
*******************************************************************
Gets an override value, sometimes useful for Custom Trust Levels
<add key="YAF.OverrideTrustLevel" value="false" />
-->

<!-- Gets the Prefix used for Url Rewriting - default is "yaf_"
<add key="YAF.UrlRewritingPrefix" value="yaf_" />
-->


<!--
******************************************************************
** providerExceptionXML Key ** Defaults to: ProviderExceptions.xml **

The file that the providers pull exception messages from.
-->
<add key="YAF.ProviderExceptionXML" value="ProviderExceptions.xml" />

<!--
******************************************************************
** UploadDir Key ** Defaults to: "~/upload/" **

Has now been deprecated in favour of BoardRoot. The upload folder is now
the value of BoardRoot appended with "upload/".
-->

<!--
******************************************************************
** Optional BoardRoot Key ** Defaults to a empty string.

Provides a method of moving Images/Themes/Uploads to a subfolder within
the YAF application.
Make sure there is write permissions to this directory for Uploads to
work.
<add key="YAF.BoardRoot" value="~/Boards/" />
-->

<!--
******************************************************************
** Optional MultiBoardFolders Key ** Defaults to false

Appends BoardRoot with the CurrentBoardID to allow different Images/
Uploads/Themes per board. E.g. /Boards/1/Themes.
Requires manually adding of themes.
<add key="YAF.MultiBoardFolders" value="true" />
-->

<!--
******************************************************************
** Optional File Root Key ** Defaults to: AppRoot (below) **

File Root is server-side and used by YAF to find and load files.

If YAF forum files are not located in the Application Root (~/)
of your web site you need to specify the additional url
in this root key. Example: Application Root is "/forum"
You want your forum at "www.mysite.com/forum". You need to specify
"/forum" in your root key below.

PLEASE NOTE:

YAF .dll files (from the \bin directory in the zip) AND ALL files
in the \App_Code directory MUST be located in the Application Root.

<add key="YAF.FileRoot" value="~/forum"/>
-->


<!--
******************************************************************
** DisableJQuery Key ** Defaults to: jQuery **

Used to set JQuery alias. Used for integration purposes.

<add key="YAF.JQueryAlias" value="jQuery" />
-->

<!--
******************************************************************
** DisableJQuery Key ** Defaults to: false **

Used to YAF JQuery version loading. Used for integration purposes.

<add key="YAF.DisableJQuery" value="false" />
-->

<!--
******************************************************************
** JQuery Key ** Defaults to: js/jquery.min.js **

Used to override default YAF JQuery version. Used for integration purposes.

<add key="YAF.JQuery" value="js/jquery.min.js" />
-->

<!--
******************************************************************
** JQueryUIFile Key ** Defaults to: https://ajax.googleapis....eryui/1/jquery-ui.min.js  **

Used to override default YAF JQueryUI version. Used for integration purposes.

<add key="YAF.JQueryUIFile" value="//ajax.googleapis.com/ajax/libs/jqueryui/1/jquery-ui.min.js" />
-->

<!--
******************************************************************
** JQueryUILangFile Key ** Defaults to: https://ajax.googleapis....8n/jquery-ui-i18n.min.js  **

Used to override default YAF JQueryUI version. Used for integration purposes.

<add key="YAF.JQueryUILangFile" value="https://ttpro.advantage360.com/a360forum/resources/js/jquery-ui-i18n.min.js" />
-->

<!--
******************************************************************
** Optional AppRoot ** Defaults to: "~/" **

If YAF forum URL is different than the Application Root, specify
it manually here. Do NOT include server information.

e.g. ~/forum
-->

<add key="YAF.AppRoot" value="~/" />

<!--
******************************************************************
** Optional Base Url Mask ** Defaults to: "Current Server" **

Use this key to provide a base url override or mask for your YAF
forum. This is the protocol and server ONLY - add any path information
to your AppRoot.

e.g.: https://mydomain.com 

<add key="YAF.BaseUrlMask" value="https://ttpro.advantage360.com/a360forum" />
<add key="YAF.ForceScriptName" value="default.aspx" />

-->

<!--
******************************************************************
** Membership Provider Key Type ** Defaults to: "System.Guid" **

The type that the membership provider expects the ProviderKey
to be. Most providers use expect System.Guid.

Valid values include:

System.Guid (default)
System.String (max 64 character length)
System.Int32
System.Int64

-->
<add key="YAF.ProviderKeyType" value="System.Guid" />

<!--
******************************************************************
** Mobile User Agents **

Comma delimited list of all the mobile user agents. Case-insensitive.
-->
<add key="YAF.MobileUserAgents" value="iphone,ipad,midp,windows ce,windows phone,android,blackberry,opera mini,mobile,palm,portable,webos,htc,armv,lg/u,elaine,nokia,playstation,symbian,sonyericsson,mmp,hd_mini"/>

<!--
******************************************************************
** Optional ShowToolBar ** Defaults to: "true" **

You can hide the toolbar with the optional key below. You may want
to do this if you've incorporated YAF into your existing site and
have your own menu controls for accessing the forum.

<add key="YAF.ShowToolBar" value="false" />
-->

<!--
******************************************************************
** Optional AllowLoginAndLogoff ** Defaults to: "true" **

You can turn off the ability for YAF users to login and logoff (for
site integration) by uncommenting the key below.

<add key="YAF.AllowLoginAndLogoff" value="false" />
-->

<!--
******************************************************************
** Optional SqlCommandTimeout ** Defaults to: "99999" **

Option to Set the Sql Command Timeout

In some cases is need to set it to Unlimited value="0"

<add key="YAF.SqlCommandTimeout" value="99999" />
-->

<!--
******************************************************************
** Optional Facebook Single Sign On Feature

To Turn on that Feature you need to have an Facebook Developer
Application

<add key="YAF.FacebookAPIKey" value="XXXX" />
<add key="YAF.FacebookSecretKey" value="XXXX" />
-->

<!--
******************************************************************
** Optional Twitter Single Sign On Feature

To Turn on that Feature you need to have an Twitter Developer
Application you can do this here:
https://dev.twitter.com/apps 
Dont Forget to Define a Callback URL, you can enter anything you wan t
it will be ovritten by YAF.

<add key="YAF.TwitterConsumerKey" value="XXXX" />
<add key="YAF.TwitterConsumerSecret" value="XXXX" />
-->

<!--
******************************************************************
** JS and CSS Block Compression Minify Feature

Option to Automatically Compress Java Script and/or CSS Blocks
by Default it is turned off if you want to disable it you need to add the following
lines

<add key="YAF.CompressJSBlocks" value="false" />
<add key="YAF.CompressCSSBlocks" value="false" />
-->


<!-- RadEditor configuration settings-->
<add key="YAF.RadEditorSkin" value="Black"/>
<add key="YAF.UseRadEditorToolsFile" value="true"/>
<add key="YAF.RadEditorToolsFile" value="editors/radEditor/toolsFile.xml" />
<!-- RadEditor configuration settings-->
</appSettings>



Thanks,
Ozzy
ocortez
  • Posts: 6
  • Joined: 31/01/2013
My mistake I just realized that the two lines were commented out. Sorry I'm totally new at this stuff. Many thanks for the response and help.

Best,
Ozzy Cortez
Forum Jump  
  • You cannot post new topics in this forum.
  • You cannot reply to topics in this forum.
  • You cannot delete your posts in this forum.
  • You cannot edit your posts in this forum.
  • You cannot create polls in this forum.
  • You cannot vote in polls in this forum.

About Us

The YAF.NET is an open source .NET forum project. YAF.NET is supported by an team of international developers who are build community by building community software.

Powered by Resharper Donate with PayPal button

Project Twitter Updates

Copyright © YetAnotherForum.NET & Ingo Herbote. All rights reserved