Is it possible to force https requests instead of http

[ghost]

There are some flash games that send GET requests to a website using "http" instead of "https."

It causes an error : "Mixed Content: The page at 'https://example.com' was loaded over HTTPS, but requested an insecure XMLHttpRequest endpoint 'http://example.com'. This request has been blocked; the content must be served over HTTPS."

[danielhjacobs]

Yes, use the configuration option upgradeToHttps: https://github.com/ruffle-rs/ruffle/wiki/Using-Ruffle#configuration-options. It should be on-by-default on https websites already though.

[SporeProductions]

Does the polyfill version also have it on by default? I'm getting the same issue OP is reporting, using the version of Ruffle that's on your CDN.

[danielhjacobs]

Should be:

ruffle/web/src/navigator.rs

Lines 31 to 33 in 87ce0f5

	// Upgrade to HTTPS takes effect if the current page is hosted on HTTPS.
	let upgrade_to_https =
	upgrade_to_https && window.location().protocol().unwrap_or_default() == "https:";

Applies when upgradeToHttps is set and the current page is hosted on https.

upgradeToHttps is default true:

ruffle/web/packages/core/src/load-options.ts

Lines 182 to 184 in 7cbba5b

	* @default true
	*/
	upgradeToHttps?: boolean;

What page is having the issue?

[SporeProductions]

I was trying to figure out why this game wasn't proceeding and thought I saw it trying to call a banner ad from an http url and it being blocked. Today, after some cache-clearing and further examination I can't see the same error.

It's this game, "Flash3DX". It should proceed to display a start/play screen but instead stays stuck on the loading.
https://www.lilgames.com/games/puzzle/flash-3dx/

[n0samu]

@SporeProductions this is a bug in Ruffle. I've reported it here: #7419
Hopefully the devs will be able to look into it!