- TsaukpaetraAsked on February 07, 2015 at 01:11 AM
So I'm using an older form that was called Wishbox, which has the capability to screenshot the current webpage as part of the submission. Having moved to HTTPS, I found that apparently not all of the assets for this are being served via https when the form itself is.
Some console entries:
Mixed Content: The page at 'https://tsaukpaetra.com/ywriter/main.php?id=0BzJisXNV_Zh3VXBvcHMyeHlObUU' was loaded over HTTPS, but requested an insecure stylesheet 'http://www.jotform.com/css/buttons.css'. This request has been blocked; the content must be served over HTTPS.jotform.forms.js?3.2.5257:230 (anonymous function)feedback2.js?3.2.5257:2 f.extend._Deferred.e.resolveWithfeedback2.js?3.2.5257:4 wfeedback2.js?3.2.5257:4 f.ajaxTransport.send.d.onload.d.onreadystatechange
20jotform.forms.js?3.2.5257:230 Mixed Content: The page at 'https://tsaukpaetra.com/ywriter/main.php?id=0BzJisXNV_Zh3VXBvcHMyeHlObUU' was loaded over HTTPS, but requested an insecure image 'http://www.jotform.com/images/blank.gif'. This content should also be served over HTTPS.
2jotform.forms.js?3.2.5257:230 Mixed Content: The page at 'https://tsaukpaetra.com/ywriter/main.php?id=0BzJisXNV_Zh3VXBvcHMyeHlObUU' was loaded over HTTPS, but requested an insecure image 'http://www.jotform.com/images/wishbox/save.png'. This content should also be served over HTTPS.
jotform.forms.js?3.2.5257:230 Mixed Content: The page at 'https://tsaukpaetra.com/ywriter/main.php?id=0BzJisXNV_Zh3VXBvcHMyeHlObUU' was loaded over HTTPS, but requested an insecure script 'http://www.jotform.com/min/?g=fabric&v123'. This request has been blocked; the content must be served over HTTPS.Page URL:
- BenAnswered on February 07, 2015 at 04:40 AM
The Wishbox forms (feedback forms) are actually not the same as jotforms, but quite similar - this is another product.
Now based on the first segment that you have posted:
- You are not calling for secure form.
The secure embedding code would look like this:
Once you embed it like that the resources will be loaded through the HTTPS as well.
I would suggest taking a look at this guide to see how to get embed code for Secure jotform.
Do let us know how it goes.
- TsaukpaetraAnswered on February 08, 2015 at 05:46 PM
No, doesn't work. The scriplet I set was only for the form ID. This is the actual code used, which does load most of the form securely:
formId : "33247890235154",
buttonText : "Feedback",
base : "https://secure.jotform.us/",
background : "#F59202",
fontColor : "#FFFFFF",
buttonSide : "bottom",
buttonAlign : "right",
type : false,
width : 240,
height : 648,
instant : true
The button itself loads, but since it's a Wishbox form, it tries to load additional resources which are not hosted on the secure server (as well as some scripts, which is forbidden because it's an XSS attack).
So, you are correct that the pure jotform-only code loads fine, but the wishbox portions do not.
- TsaukpaetraAnswered on February 08, 2015 at 06:22 PM
Resources that are supposed to be secure, but aren't:
These resources, especially scripts, do not get loaded properly when using the secure version of the form.
- JotForm Supportashwin_dAnswered on February 09, 2015 at 01:10 AM
I would suggest you to share the web page URL where you have embedded your wishbox form and we will take a look before reporting this to our back end team.
- TsaukpaetraAnswered on February 09, 2015 at 01:18 AM
You can find a test page I've made up https://tsaukpaetra.com/ywriter/f.html
The top right is the most recent attempt to get the wishbox working.
Lower left is the suggestion you made, which does not have wishbox functionality.
Lower right is the original button code, which also doesn't work.
- JotForm Supportashwin_dAnswered on February 09, 2015 at 03:03 AM
I did check your web page and where you have embedded your forms and I am able to replicate the issue you are having. The wishbox does not seems to work over SSL as it refers several non secure content. Please check the screenshot below:
Let me report it to our back end team. We will get back to you as soon as we have any update from them.
We would like to test this issue further. I would also suggest you to please remove the other two forms from your web page and just retain just the "Feedback" button.
- NoahsServicesAnswered on August 07, 2016 at 08:28 PM
I assume I am wasting my time with this, as it looks like no one have been able to get this to work since 2012...
- JotForm SupportChriistianAnswered on August 07, 2016 at 09:54 PM
We apologize for the inconvenience. It does seem like the wishbox is encountering some issues at this time. I see you have already posted a thread regarding this issue. The issue has been raised to our developers. Unfortunately we cannot provide an ETA for when this will be fixed. If there are any news, we will let you know on your thread here: https://www.jotform.com/answers/887322. Thank you.