'Only secure content is displayed' causing problem

Hi

When viewing XOT LOs in IE we get the 'Only secure content is displayed' message with a button to 'Show all content'. This is causing problems with 'YouTube Feed' and 'Embed Content' pages particularly. Clicking the 'Show all content' button fixes the issue but many of our users won't be comfortable doing this. In Firefox these pages appear blank but clicking the shield icon in the address bar of the browser fixes the issue - many of our users won't know to do this.

What can we do to avoid the problem so users can see all content straight away?

This is a relatively new installation of XOT (version 2.1, I think). I've been told by our IT support that the entire site is behind HTTPS, not just the login page. Could this be the cause of the problem?

I'd be grateful for any guidance
Thanks

Oli

Yes, the issue is caused by the fact that the xot content is on an https server, and your LO's are referring to other content through http, specifically youtube and embed content.

For youtube, you should be able to fix it by making sure to use https.

For the embed content you should also use https, but that is not always supported by the website you are trying to embed.

The best way to handle this would be to ask whether IT can make the <xot install>/play.php available through http://

Then, your content writers will still encounter this issue, but hopefully that's a much smaller group, and acceptable.

I hope this makes sense to you.

Hi,

For Youtube you should use a schemeless URL such as this embed code

<iframe width="560" height="315" src="//www.youtube.com/embed/rR-uFAshbj0" frameborder="0" allowfullscreen>

You'll see that it doesn't state http or https but leaves it up to the [strike]server[/strike] browser to decide...

You can't do that with every server though...

As Tom says, try to get your server using http instead and you'll solve most of the issues.

John

Thank you Tom and John for your replies. I'll ask IT Support if they can take a look.
Cheers
Oli

Hi

We are delivering the LOs to students via our VLE (Blackboard) i.e. we export the deployment zip, upload into the VLE content collection and then provide a link to the index.htm file in the LO for the students to click.

The IT people have suggested that given this approach it shouldn't matter if the xerte installation is behind https or not. I've just tried delivering it via the VLE and get the same results as before though - some content is still not displayed immediately.

I'd welcome any further advice.

Thanks

Hi,

Since Blackboard operates on https, any content included will also be being delivered via https - it is not the XOT install in this case...

If you try to include something like an <iframe> with src="http:// or similarly with <img> or other content then you will get this error as it is a security issue. Images you are linking to should be included in the package (if you can , depending on copyright) and iframe src tags should be changed to src="// format, i.e. dropping the scheme, but only if the server that you are linking to does support both http and https... Youtube does and now expects you to use this format and XOT v2.1 supports all Youtube IDs, URLs and embed codes as far as i'm aware... (i'd like to know about it if you find out that it doesn't)

You should be able to view the LO and use the console inspector in Chrome to see exactly which content is causing issue.

John