This issue has been created
 
 
XWiki Platform / cid:jira-generated-image-avatar-670b03d1-5268-4917-af8c-8daec1c250e2 XWIKI-23342 Open

Attachment deletion fails (https/http mixed content)

 
View issue   ·   Add comment
 

Issue created

 
cid:jira-generated-image-avatar-1e5dac93-2ee4-448d-92d1-2a7c46db7d25 Armin Günther created this issue on 26/Jun/25 11:34
 
Summary: Attachment deletion fails (https/http mixed content)
Issue Type: cid:jira-generated-image-avatar-670b03d1-5268-4917-af8c-8daec1c250e2 Bug
Affects Versions: 16.10.7
Assignee: Unassigned
Components: Attachments
Created: 26/Jun/25 11:34
Priority: cid:jira-generated-image-static-major-76c6bf7e-206d-4657-870b-958c29bfe0f5 Major
Reporter: Armin Günther
Description:

All links in the Attachments box of a page (name, authors, actions) are generated with "http://" scheme. We serve XWiki via https (via Apache httpd proxy). The browser does thus not allow links to http:// content (https://developer.mozilla.org/en-US/docs/Web/Security/Mixed_content) so the request to delete or move attachments will not be executed and a failure message appears.

The workaround right now is to copy the move/delete links and add https:// at the front.