{"action":"created","issue":{"url":"https://api.github.com/repos/new-xkit/XKit/issues/213","labels_url":"https://api.github.com/repos/new-xkit/XKit/issues/213/labels{/name}","comments_url":"https://api.github.com/repos/new-xkit/XKit/issues/213/comments","events_url":"https://api.github.com/repos/new-xkit/XKit/issues/213/events","html_url":"https://github.com/new-xkit/XKit/pull/213","id":100392365,"number":213,"title":"Serve local assets over HTTPS","user":{"login":"0xazure","id":1041456,"avatar_url":"https://avatars.githubusercontent.com/u/1041456?v=3","gravatar_id":"","url":"https://api.github.com/users/0xazure","html_url":"https://github.com/0xazure","followers_url":"https://api.github.com/users/0xazure/followers","following_url":"https://api.github.com/users/0xazure/following{/other_user}","gists_url":"https://api.github.com/users/0xazure/gists{/gist_id}","starred_url":"https://api.github.com/users/0xazure/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/0xazure/subscriptions","organizations_url":"https://api.github.com/users/0xazure/orgs","repos_url":"https://api.github.com/users/0xazure/repos","events_url":"https://api.github.com/users/0xazure/events{/privacy}","received_events_url":"https://api.github.com/users/0xazure/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/new-xkit/XKit/labels/bug","name":"bug","color":"fc2929"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":8,"created_at":"2015-08-11T19:42:46Z","updated_at":"2015-08-12T17:21:35Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/new-xkit/XKit/pulls/213","html_url":"https://github.com/new-xkit/XKit/pull/213","diff_url":"https://github.com/new-xkit/XKit/pull/213.diff","patch_url":"https://github.com/new-xkit/XKit/pull/213.patch"},"body":"This modifies `gulp server` to serve local assets (built Extensions, etc) over HTTPS via self-signed certs.  Without this change, Tumblr on Chrome complains about:\r\n\r\n>Mixed Content: The page at 'https://www.tumblr.com/dashboard' was loaded over HTTPS, but requested an insecure XMLHttpRequest endpoint 'http://localhost:31337/Extensions/dist/page/list.json'. This request has been blocked; the content must be served over HTTPS.\r\n\r\n(there may be a similar issue on Firefox, I haven't tested this there).\r\n\r\nI'll need a sanity check that this will also work on Firefox.  My steps to reproduce are:\r\n\r\n1. Checkout this branch\r\n1. `npm install`\r\n1. Modify [this line](https://github.com/new-xkit/XKit/blob/715339c0a2b758dd78e7e9b51895ce4cc64c3acb/xkit.js#L233) in `xkit.js` to point it to `//:localhost:31337/Extensions/dist/`\r\n1. Load up Tumblr in the browser\r\n1. XKit > Other > 'Update all my extensions' and ensure that the extensions actually update from `localhost` (may need to pop open network tools to verify)"},"comment":{"url":"https://api.github.com/repos/new-xkit/XKit/issues/comments/130381269","html_url":"https://github.com/new-xkit/XKit/pull/213#issuecomment-130381269","issue_url":"https://api.github.com/repos/new-xkit/XKit/issues/213","id":130381269,"user":{"login":"nightpool","id":233815,"avatar_url":"https://avatars.githubusercontent.com/u/233815?v=3","gravatar_id":"","url":"https://api.github.com/users/nightpool","html_url":"https://github.com/nightpool","followers_url":"https://api.github.com/users/nightpool/followers","following_url":"https://api.github.com/users/nightpool/following{/other_user}","gists_url":"https://api.github.com/users/nightpool/gists{/gist_id}","starred_url":"https://api.github.com/users/nightpool/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/nightpool/subscriptions","organizations_url":"https://api.github.com/users/nightpool/orgs","repos_url":"https://api.github.com/users/nightpool/repos","events_url":"https://api.github.com/users/nightpool/events{/privacy}","received_events_url":"https://api.github.com/users/nightpool/received_events","type":"User","site_admin":false},"created_at":"2015-08-12T17:21:34Z","updated_at":"2015-08-12T17:21:34Z","body":"also this didn't work for me on chrome initially, I had to do something\nsimilar. (go to localhost:31337 and click \"continue anyway\"\n\nOn Tue, Aug 11, 2015 at 10:07 PM James Hobin <notifications@github.com>\nwrote:\n\n> @0xazure <https://github.com/0xazure> Firefox rejects the certificate:\n>\n> localhost:31337 uses an invalid security certificate.\n>\n> The certificate is not trusted because it is self-signed.\n> The certificate is only valid for New XKit\n>\n> —\n> Reply to this email directly or view it on GitHub\n> <https://github.com/new-xkit/XKit/pull/213#issuecomment-130142754>.\n>\n"}}