3 ms·
Fun! Level 6 failed to load any widgets, evil or otherwise, in Chrome; I had to switch to Firefox and redo the whole test. For my external script I used http://
by honoredb 12y ago
Fun! Level 6 failed to load any widgets, evil or otherwise, in Chrome; I had to switch to Firefox and redo the whole test. For my external script I used http://pastebin.com/raw.php?i=15S5qZs0 http://pastebin.com/raw.php?i=15S5qZs0, although I don't think the lack of a .js extension there was the problem.
- dpacmittal 12y agoWeird. It worked fine for me in chrome.
- geoffroy 12y agogot the same problem, it only works with a https address !
- hornetblack 12y agoI had the same issue, I think it depends on browser configuration. Some browsers disallow http content on https pages.
- ff_ 12y agoNope. Works even if you use an address without http, but beginning with only "//"
- ufo 12y agoIn that example "//" is just another way to say "https://" https://", though.
- fred_durst 12y agoI hope this isn't a spoiler, but remember there are other ways to load resources without an external request. You can pass that stage without any requests to external servers.
- andrewjkerr 12y agoI had to manually remove the https:// https:// in front of the URL for it to work. The following error is: [blocked] The page at 'xss-game' was loaded over HTTPS, but ran insecure content from 'script-url': this content should also be loaded over HTTPS.
- totallymike 12y agoThe regex is case sensitive. That's how I solved it.
- WickyNilliams 12y agohaha so obvious yet I completely missed that! I went with a protocol-relative url [0] [0] http://www.paulirish.com/2010/the-protocol-relative-url/ http://www.paulirish.com/2010/the-protocol-relative-url/