Editor ignores base URL protocol and saves it with http instead https

[eridur]

Hi,

since the upgrade from Confluence 6.13.0 to 6.14.0 Confluence ignores the base URL protocol. I wanted to report this problem as bug, but as 10$ user i am not allowed to do this.

Let the base url be "https://wiki.the.domain"

When i create a page and add an emoticon or some image, for example the (tick) symbol , this get's saved the following (checked it with the official code viewer macro from Atlassian):

<td colspan="1" style="text-align: center;">
 <img alt="(tick)" border="0" class="emoticon emoticon-tick" src="http://wiki.the.domain/s/en_US/7901/9eed016aaa593220cd98620fec88bcbd9fd55893/_/images/icons/emoticons/check.svg" title="(tick)"/>
 </td>

This should not happen. My complete instance works with https only (via Apache Reverse Proxy). When going in edit mode my browser shows the mixed content warning because the image of the tick symbol is in blank http.

So in editor mode the page does not show the symbol because the url is wrong.

In the normal page view mode everything works like exspected

 

I already configured Apache to use:

Header always set Content-Security-Policy "upgrade-insecure-requests;"which should update all http stuff to https. But the editor (by the way with enabled syncrony) ignores.

Anyone an idea? This bug frustrates me totally because in editing mode i have only blank boxes instead of the correct images :-/

Regards, Mario

The config i use:

<VirtualHost *:443>
 ServerName wiki.the.domain
 ServerAdmin webmaster@the.domain

ErrorLog ${APACHE_LOG_DIR}/error-confluence.log
CustomLog ${APACHE_LOG_DIR}/access-confluence.log combined

SSLEngine on
 SSLCertificateFile /etc/ssl/the.domain.pem

Header always set Content-Security-Policy "upgrade-insecure-requests;"
 ProxyRequests Off

# Auth changes in 2.4 - see http://httpd.apache.org/docs/2.4/upgrading.html#run-time
 <Proxy *>
 Require all granted
 </Proxy>

ProxyPass /synchrony http://localhost:8091/synchrony
 <Location /synchrony>
 Require all granted
 RewriteEngine on
 RewriteCond %{HTTP:UPGRADE} ^WebSocket$ [NC]
 RewriteCond %{HTTP:CONNECTION} Upgrade$ [NC]
 RewriteRule .* ws://localhost:8091%{REQUEST_URI} [P]
 </Location>

ProxyPass / http://localhost:8090/
 ProxyPassReverse / http://localhost:8090/
 <Location />
 Require all granted
 </Location>

The connector config in server.xml:

<Connector port="8090" connectionTimeout="20000" redirectPort="8443"
 maxThreads="48" minSpareThreads="10"
 enableLookups="false" acceptCount="10" debug="0" URIEncoding="UTF-8"
 protocol="org.apache.coyote.http11.Http11NioProtocol"
 proxyName="wiki.the.domain" proxyPort="443" scheme="https"/>

[Chii]

Check if the configured base url is setup correctly. Links for the emoticons uses the url configured, rather than the url in the browser.

[eridur]

Hi,

the base url given is definitely correctly - triple checked at really first thing in the admin backend.