Topic on Talk:Citoid

How can it work in private wiki in HTTPS

4
VincentNo15 (talkcontribs)

Unfortunately I'm not professional programmer or developer. So first of all, I apologize for my humble explation of my situation.

I want establish my own private wiki with SSL certificate in AWS EC2 instance.


After the setting of citoid server and zotero server, I passed the trial of citoid server/zotero server.


Even though the output of PMID search in web browser URL also showed normal response.

(MyDomain):1970/api?action=query&format=mediawiki&search=30863548


But, In my private wiki based on https proxy, citoid is not working in visual editor with message of "We couldn't make a citation for you. You can create one manually using the "Manual" tab above.". In the chrome debugging, they said like below. (I'm sorry to mask the domain name because of privacy. I re-checked the spell of domain name in configuration and there was no spell error.)


  • Mixed Content: The page at (deleted to avoid abusefilter) was loaded over HTTPS, but requested an insecure XMLHttpRequest endpoint (deleted to avoid abusefilter). This request has been blocked; the content must be served over HTTPS.

I'm just curious about possibility of success. Is it the problem of cross site scripting? Then how can I do the cross site scripting. (I tried the $wgCrossSiteAJAXdomains configuration but it was not working)

Or do I have to customize citoid server to attach the SSL? If the cross-site scripting can cause the crucial security problem, then I'm willing to customize the citoid server. But I have no expertise about that. Please help me!!!

Mvolz (WMF) (talkcontribs)
222.237.67.233 (talkcontribs)

Sorry for late response.

I've already changed that part but in debugging mode, error message was printed.

"CORS request did not succeed"

Even though I'm not the professional developer, I think that I may have to change some configuration of Citoid server to passing the https proxy.

Can you help me to solve this problem? :(

VincentNo15 (talkcontribs)

└ I forgot to login. I'm the same person who ask help.

How do you think about using stunnel to get through?

Reply to "How can it work in private wiki in HTTPS"