mirror of
https://github.com/maziggy/bambuddy.git
synced 2026-10-04 05:01:37 +02:00
Users behind an HTTPS reverse proxy pointing the Spoolman URL at plain HTTP saw the Filament tab render as a blank page with only a console- side Mixed Content warning. Browsers block HTTP iframes inside HTTPS parents by design (independent of CSP; #1054's frame-src http: fix only helps when the parent is also HTTP). The fix for the user's setup is to put Spoolman behind the same reverse proxy with HTTPS. Bambuddy can't override the browser's mixed-content block, but it can stop rendering an iframe that will silently fail. When window.location.protocol is https: and the Spoolman URL starts with http://, render a warning card explaining the root cause and offering an "Open in new tab" fallback (standalone tabs aren't subject to mixed-content rules). Localised across all 8 UI languages.