[WW-4774] Upgrding Struts 2.3.1 to 2.5.10.1 - Redirect issues HTTPS to HTTP

• Type: Bug
• Status: Closed
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 2.5.10
• Fix Version/s: 2.5.12
• Assignee: Unassigned
• Reporter: upendar
• Created: 25/Mar/17 15:38
• Updated: 29/Mar/17 14:07
• Resolved: 28/Mar/17 19:07

Description

We are upgrading Struts2 from 2.3.1 to 2.5.10.1 ; redirect making https:// to http:// . The following errors in chrome and IE are seen while redirecting from the popup to main window
redirecting popup (create user) — main window (viewdashboard) - the URL shows https:// to http://

We are blocked completely due to this issue and need support ASAP. We also reviewed the apache server configurations and looks good. Please share the fix in detail.

Error Issue in chrome :
Mixed Content: The page at 'https://XXXXX/XX/XX/viewdashboard?clear&Id=1&uar=44' was loaded over HTTPS, but requested an insecure XMLHttpRequest endpoint 'http://XXX/XX/XX/viewdashboard?uar=44&Id=1'. This request has been blocked; the content must be served over HTTPS.

Issue in IE
SEC7127: Redirect was blocked for CORS request.
File: account
SCRIPT7002: XMLHttpRequest: Network Error 0x2ef1, Could not complete the operation due to error 00002ef1.

Issue Links

• is duplicated by: WW-4773 Mixed content https to http when upgraded to 2.3.32 or 2.5.10.1
• links to: GitHub Pull Request #3