TreeTrumpet don't work on modern Browsern (over ssl!?)

[erdoking]

I testet the newest release (v0.1.4) on Firefox 41.0 and Google Chrome 45.0.
Both browser doesn't load external Java-Scripts for security reasons so that the page doesn't work exept i manually allow the external scripts ...

I used an apache reverse proxy which provide ssl support. The (backend) treetrumpet server doesn't provide ssl himself. It maybe works on other installations.

In my opinion external javascript is an big security problem! In my current installation i manually included all external javascripts local.

[stuporglue]

I testet the newest release (v0.1.4) on Firefox 41.0 and Google Chrome 45.0.
Both browser doesn't load external Java-Scripts for security reasons so that the page doesn't work exept i manually allow the external scripts ...

I've also got FF 41 and Chrome 45.0 on OSX and both load external scripts. I think there are only two reasons that they wouldn't load the resources:

1. If the resources are requested over http and the page is loaded over https (or vice-versa) they will refuse
2. If you have changed any security settings or installed any plugins which don't allow external scripts

I suspect that it's probably case (1) since that's what I was trying to fix as part of this release.

It is possible that the proxy is requesting the page with http:// and then not rewriting some of the URLs to use https:// before serving it to the browser. I think debugging a proxy is probably more than I can handle at the moment.

It's working for me with SSL and without a proxy on Apache so I will wait to get another confirmation of this issue before trying to debug it.