Web app features fail silently when the page is served over plain HTTP

Status: Fixed
Fixed in: v26.10.3
Area: web
Source discussion: https://forum.objo.dev/d/1354-some-feedback-from-building-chartview-web-support-and-a-few-language-notes/6
Last updated: 2026-10-20

Upvotes

0 upvotes

Uses your Objo forum account.

Public summary

When a web app is served over plain HTTP from a non-localhost origin (for example http://192.168.1.20:8080 on a LAN), most interactive features silently fail with no visible error and nothing logged server-side:

Server-rendered Canvas stays blank (reported with ChartView, forum 1354).
Chart and TreeView snapshots never apply; MarkdownViewer documents never render.
ListBox virtual windows, row commands, and editing stop working.
ComboBox and TagField autocomplete suggestions never arrive.
FileUpload fails its digest step.

Everything works on localhost and on HTTPS. Expected behaviour: these features work on insecure origins too, or at minimum the page states clearly that a secure context is required. Note that some browser features (clipboard, native notifications) genuinely do require HTTPS regardless; this issue is about Objo's own client code depending on secure-context-only WebCrypto features it does not need.