Details
-
Type:
Bug
-
Status: Closed (View Workflow)
-
Priority:
Major
-
Resolution: Done
-
Affects Version/s: None
-
Fix Version/s: 9.0.2 Minor Release
-
Labels:
-
Story Points:1
-
Sprint:Fall 2018 Sprint 2, Fall 2018 Sprint 3
Description
When the user clicks on the link "Show: Alignments in IGB" while accessing eFP-Seq Browser, Firefox blocks localhost request to load data in running instance IGB, as it treats the same as mixed content.
We need to find a workaround for this issue for Firefox specifically, as it works as expected in Chrome.
Attachments
Issue Links
Activity
Please also try in other browsers
- Opera
- Internet Explorer
- Edge
Deployed on BioViz main https://bioviz.org
Hi Kiran Korey
Steps to replicate the issue:
1. Go to https://bar.utoronto.ca/eFP-Seq_Browser/ and Click "Load data" button.
2. After the data is loaded, check the last column of main page and Click "Alignments in IGB".
3. You can see that Bioviz page is unable to load alignments in IGB if the browser is Firefox. It works fine in Chrome.
Please let me know if you need more information.
Hi Srishti Tiwari
Can you add the link to test this issue?
To test the idea, I set up these urls:
URL #1 - makes cross-origin request and gets back a response with Access-Control-Allow-Origin header:
URL #2 - makes cross-origin request and gets back a response with NO such header:
Note: these urls will disappear after this issue is closed
Nice work ST on discovering the problem and finding the cause.
Based on your description, I was able to find some on-line documentation that suggested this fix:
Looks like we need to add the following header to IGB's responses to HTTP requests:
Access-Control-Allow-Origin: *
This enables javascript code downloaded from an origin (e.g., bioviz.org) to consume and display data from non-origin endpoints.
https://bugzilla.mozilla.org/show_bug.cgi?id=903966
This issue about blocking localhost as a mixed content still exists in Firefox, because of which we are seeing the error while loading data on IGB.
These are two approaches to this -
1. Ask the user to allow all mixed content for all websites, but it is not recommended, the configuration is all or none.
2. Notify the user about the issue while displaying the error page and ask to disable protection - on every request.
Tested the issue in Chrome, Firefox, Opera, Edge, and IE.
The Page loaded and the sequence was loaded in IGB from Chrome, Firefox, Opera and EDGE.
But could not get it loaded in IE, even the page https://bar.utoronto.ca/eFP-Seq_Browser/ could not be loaded in IE.
Marking the issue as resolved at this point in time.