René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"[Bug]: Request to insecure websocket endpoint is blocked by browser","articleBody":"### Bug summary\n\nWhen running matplotlib using the `webagg` backend behind a reverse proxy that adds HTTPS with secure headers like HSTS, the request to the insecure websocket is blocked by the browser with the following error:\r\n\r\n```\r\nMixed Content: The page at 'https:/\u003csome_website\u003e/' was loaded over HTTPS,  but attempted to connect to the insecure \r\nWebSocket endpoint 'ws://\u003csome_website\u003e/1/ws'. This request has been blocked; this endpoint must be available over WSS.\r\n```\n\n### Code for reproduction\n\n```python\nimport matplotlib\r\nimport matplotlib.pyplot as plt\r\n\r\nmatplotlib.use('webagg')\r\n\r\nplt.plot(range(10))\r\nplt.show()\n```\n\n\n### Actual outcome\n\nFails to connect to the websocket with the following message:\r\n\r\n```\r\nMixed Content: The page at 'https:/\u003csome_website\u003e/' was loaded over HTTPS,  but attempted to connect to the insecure \r\nWebSocket endpoint 'ws://\u003csome_website\u003e/1/ws'. This request has been blocked; this endpoint must be available over WSS.\r\n```\n\n### Expected outcome\n\nThe JavaScript code on the page should check whether the page is being served over HTTPS and if it is, the websocket uri should use `wss:` instead of `ws:`.\r\n\r\n```js\r\nvar uri = \"{{ ws_uri }}\" + {{ str(fig_id) }} + \"/ws\";\r\nif (window.location.protocol === 'https:') uri = uri.replace('ws:', 'wss:')\r\nvar websocket = new websocket_type(uri);\r\n```\n\n### Additional information\n\nYou have to be running this behind a reverse proxy that adds HTTPS and secure headers like HSTS. I'm actually running this behind a `.dev` domain. \r\n\r\nUsing Chrome\r\n\r\n\n\n### Operating system\n\nDebian\n\n### Matplotlib Version\n\n3.6.3\n\n### Matplotlib Backend\n\nwebagg\n\n### Python version\n\n3.10.1\n\n### Jupyter version\n\n_No response_\n\n### Installation\n\npip","author":{"url":"https://github.com/whyvra","@type":"Person","name":"whyvra"},"datePublished":"2023-01-20T14:03:55.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":1},"url":"https://github.com/25040/matplotlib/issues/25040"}