Reported in the forum.

If we access the login page through an untrusted host, the page is completely broken and nothing is shown.

The problem seems to be that the warning is shown to the user using a notification box, but notifications don't seem to work because they rely on AngularJS.

Here is the JS error:

Uncaught TypeError: Cannot read property 'invoke' of undefined:

    angular.element(document).injector().invoke(function ($compile, $rootScope) {
    ...