{"action":"closed","issue":{"url":"https://api.github.com/repos/chefArchitect/shindig/issues/46","repository_url":"https://api.github.com/repos/chefArchitect/shindig","labels_url":"https://api.github.com/repos/chefArchitect/shindig/issues/46/labels{/name}","comments_url":"https://api.github.com/repos/chefArchitect/shindig/issues/46/comments","events_url":"https://api.github.com/repos/chefArchitect/shindig/issues/46/events","html_url":"https://github.com/chefArchitect/shindig/issues/46","id":137244050,"number":46,"title":"[SHINDIG-1870] Cross-site issue as http scheme is hardcoded in some URI template in container.js","user":{"login":"chefArchitect","id":4200677,"avatar_url":"https://avatars.githubusercontent.com/u/4200677?v=3","gravatar_id":"","url":"https://api.github.com/users/chefArchitect","html_url":"https://github.com/chefArchitect","followers_url":"https://api.github.com/users/chefArchitect/followers","following_url":"https://api.github.com/users/chefArchitect/following{/other_user}","gists_url":"https://api.github.com/users/chefArchitect/gists{/gist_id}","starred_url":"https://api.github.com/users/chefArchitect/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/chefArchitect/subscriptions","organizations_url":"https://api.github.com/users/chefArchitect/orgs","repos_url":"https://api.github.com/users/chefArchitect/repos","events_url":"https://api.github.com/users/chefArchitect/events{/privacy}","received_events_url":"https://api.github.com/users/chefArchitect/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/chefArchitect/shindig/labels/bug","name":"bug","color":"fc2929"}],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2016-02-29T12:44:23Z","updated_at":"2016-02-29T12:45:37Z","closed_at":"2016-02-29T12:45:37Z","body":"<p>Some URI templates defined in container.js has scheme hardcoded as 'http'. That leads to cross-site problem as we have Apache Http (configured to use with https) in front of Tomcat + Shindig</p>\n\n<p>Detail info:</p>\n\n<p>We have one portal application configured to access via 'https', the embedded shindig server using default container.js (with 'http' in some URL templates) runs on the same host. As our gadgets (ones using OpenSocial API) fetch metadata via Ajax request, the cross-site issue appears</p>\n"}}