• Announcements

    • Brandon

      Frequently Asked Questions   03/02/16

      Do you have a question? It's probably answered here! Please continue reading before posting a new question. I am locked out! What do I do?
      Clear your cookies and open a ticket. Select the Locked out help topic. The subject should be at least five words. You should receive a reply within 24 hours. If you are still having trouble with this and you would like a guide, click here. I forgot my email! What do I do?
      Create a new xat account and open a ticket. Select the Lost Access help topic. The subject should be at least five words. In the ticket, include the username and identification number (if known) of the account you need help with. You will receive an email with a link to the ticket, but only at the email for the new xat account. Eventually when the email is changed you will be able to reset the password. How do I report scamming or phishing?
      We don't encourage threads about specific users. Create a ticket. Select the Report scam help topic. The subject should be at least five words. This is free to do, and every user should open a ticket after they have been scammed. We encourage you to submit a ticket immediately, as the forum is not the place to sort out those types of issues. How do I report an unfair ban?
      Please do not create threads about this. If you wish to report an unfair ban, make sure to click Report Unfair Ban when you are first banned. If you did not click that, then you must click message the owner (bottom right corner of the chat) and report it there. I am held! What do I do? 5-7 day hold: Change your password, then wait for the hold to decrease automatically. No further action should be necessary. If you are still having trouble, open a ticket. 5 day hold (repeated cycle): Open a ticket and state that you are having trouble with a hold that keeps repeating. 7-14 day hold after getting your account unlocked: No action is required. The hold cannot be reduced or removed. Transfer held for funds to clear (could be any amount of days): Create a ticket and ask about your account hold. System problem 25 (permanent transfer block): This is usually a result of breaking xat's Term of Use, by either scamming or phishing users. Open a ticket to ask for more information about the hold. System Problem 55: Your account is held indefinitely. This hold prevents every type of transaction on the account. Open a ticket to ask for more information about the hold. Why did I not receive the xats I paid for?
      First, login and refresh any chat that you are on. If you still notice that your xats have not arrived, open a ticket. Select the Payment Problems help topic. The subject should be at least five words. How can I get my reserve removed or reduced?
      You may have a reserve on the amount of xats you can use. This typically happens after making a payment using certain payment methods. Open a ticket. Select the Payment Problems help topic. The subject should be at least five words. You may request for the reserve to be reduced, or you may ask for the amount of xats the reserve reduces by each day. How can I get a shortname unlocked if it is no longer being used?
      To request for a shortname to be unlocked, open a ticket. Select the Short names help topic. The subject should be at least five words. You must be a paid user in order to open a ticket for this. Why can I not create a new forum topic?
      You need to confirm your forum account through your email in order to open a new topic. Why can't I use a forum signature?
      If you want to use a forum signature, you need to be an Advanced Member. Entrance to this user group is automatic and is based on post count. The more active you are on the forum, the more abilities you will be granted!
  • 0
TheHosting4You

backgrond https

Question

5 answers to this question

  • 0

It seems xat is forcing crossdomain.xml to be requested over HTTP, via the chat.swf client.

 

You will have to stop using SSL for the time being or wait until xat pushes a fix, if you want to avoid this error.

 

Note:

Your site isn't any less safe due to xat requesting crossdomain.xml via HTTP (the request is actually being blocked).

It just means some functionality may stop working (whatever the requested links are being used for).

 

Share this post


Link to post
Share on other sites
  • 0

What do you mean by "no longer safe"?
The imagizer subdomain does not get login cookies from Imageshark, it is a subdomain for images sharing.
SSL/TLS will not save you from attacks, it is just a way to authenticate the connection between the client and the server, and encrypt the text fields.

Then it does not need to be encrypted. But if this happens to any site, then they should be using https.

;)

Share this post


Link to post
Share on other sites
  • 0
On 14-3-2017 at 3:26 PM, Mega said:

What do you mean by "no longer safe"?
The imagizer subdomain does not get login cookies from Imageshark, it is a subdomain for images sharing.
SSL/TLS will not save you from attacks, it is just a way to authenticate the connection between the client and the server, and encrypt the text fields.

Then it does not need to be encrypted. But if this happens to any site, then they should be using https.

;)

 

Hello

But why do I get this error away?

 

Quote

 

Mixed Content: The page at 'https://radiozilverstream.com/chatbox.php' was loaded over HTTPS, but requested an insecure plugin data 'http://xat.com/crossdomain.xml'. This content should also be served over HTTPS.

Mixed Content: The page at 'https://radiozilverstream.com/chatbox.php' was loaded over HTTPS, but requested an insecure plugin data 'http://xat.com/web_gear/background/xat_disco.jpg'. This content should also be served over HTTPS.

 

 

 

Thanks for contributing ideas.

With kind regards

 

Share this post


Link to post
Share on other sites
  • 0

Dear,

I made the adjustment, the page works well.
The website just now https but he does not show it because these two:
Mixed Content: The page at "https://radiozilverstream.com/chatbox.php 'was downloaded over HTTPS, but requested an insecure plugin data' http://xat.com/crossdomain.xml. This content shouldering ook be served over HTTPS.
Mixed Content: The page at "https://radiozilverstream.com/chatbox.php 'was downloaded over HTTPS, but requested an insecure plugin data' http://xat.com/web_gear/background/xat_disco.jpg. This content shouldering ook be served over HTTPS.

Another error to give and the website is reported as not securely mounted and aligned.

I hope we can resolve this.

Sincerely André

Share this post


Link to post
Share on other sites
  • 0

As others have mentioned, your site shouldn't be at risk from this.

A report was passed along; hopefully this will be fixed soon and you won't see a Mixed Content warning any longer.

 

This topic is now closed.

If you have any further questions, feel free to create a new thread.

Share this post


Link to post
Share on other sites
Guest
This topic is now closed to further replies.