Re: Cross-Origin Request blocked when browing non-www of packages page and mixed content

[Ludovic Courtès]

Roel Janssen <address@hidden> skribis:

> Roel Janssen writes:
>
>> Ludovic Courtès writes:
>>
>>> Hello!
>>>
>>> Roel Janssen <address@hidden> skribis:
>>>
>>>> I noticed that the build status icons don't work when browing:
>>>>   https://gnu.org/software/guix/packages/ (Notice the lack of 'www.')
>>>>
>>>> The reason:
>>>> CORS header 'Access-Control-Allow-Origin' does not match
>>>> 'https://www.gnu.org'.
>>>>
>>>> So, could we either add 'https://gnu.org' to the Hydra nginx config, or
>>>> add a redirect to the www-variant on gnu.org?
>>>
>>> I don’t know how to fix it: there can be only one CORS header and it
>>> can contain only one URL.  Thoughts?
>>>
>>> Regarding www.gnu.org, it’s something to ask address@hidden  Would
>>> you like to email them?
>>
>> I e-mailed them.
>
> They have changed the behavior so it always redirects to the www
> variant.  You can try it:
>   https://gnu.org/s/guix/ => https://www.gnu.org/software/guix/
>
> So this has been fixed now.

Great, thank you for taking the time to address this!

Ludo’.