"Not Secure" page even with https: why does it make `spinner.gif` request over http?

[snawaz]

With XWiki 11.10.4, I’m fundamentally facing the same issue as this one:

Spinner.gif requested over http instead of https

Running Xwiki through Nginx proxy with SSL, for some reason, the spinner.gif icon is requested over http - not https. Mixed Content: The page at ‘https://test.wiki.mydomain.com/bin/view/Main/’ was loaded over HTTPS, but requested an insecure image ‘http://test.wiki.mydomain.com/resources/icons/xwiki/spinner.gif’. This content should also be served over HTTPS. Causes an issue in Chrome and FireFox saying the page is not secure. Any way to fix?

as a result I see this on the Chrome:

On investigating the network tab, I see this:

That is, it is requesting spinner.gif over http:// instead of https://

Broken again?

On the linked issue on JIRA, Mark Nagel posted this recently:

[vmassol]

I think this was fixed in Loading...

[snawaz]

@vmassol

I think this was fixed in https://jira.xwiki.org/browse/XWIKI-17187

Looks like it’s introduced again in 11.10.4.

It was fixed long before as well in Loading...

[vmassol]

They’re not the same issues. The one I referenced (Loading...) is about HTTP vs HTTPS. The one you referenced Loading... is about absolute vz relative.

Note: I could be wrong, I didn’t check much . All I know is that we fixed Loading... recently and it was about HTTP vs HTTPS

Also note that there are different places in XWiki where spinner.gif is used so previous issues could have been about these different places.

[snawaz]

@vmassol

Note: I could be wrong, I didn’t check much . All I know is that we fixed Loading... recently and it was about HTTP vs HTTPS

ah. You’re right. I checked it again. It’s fixed in 11.10.5 (and I’m using 11.10.4). I hope 11.10.5 is soon on docker.hub.