Skip to content

Use HTTPS instead of protocol-relative CDN URLs#91

Closed
hubgit wants to merge 2 commits intojquery:masterfrom
hubgit:patch-1
Closed

Use HTTPS instead of protocol-relative CDN URLs#91
hubgit wants to merge 2 commits intojquery:masterfrom
hubgit:patch-1

Conversation

@hubgit
Copy link

@hubgit hubgit commented Mar 24, 2015

Quoting @paulirish:

Now that SSL is encouraged for everyone and doesn’t have performance concerns, this [protocol-relative] technique is now an anti-pattern. If the asset you need is available on SSL, then always use the https:// asset.

http://www.paulirish.com/2010/the-protocol-relative-url/

fixes #86

@arthurvr
Copy link
Member

Hey @hubgit! Thanks for your pull request. It looks like you signed the CLA with a private GitHub email address, which we specifically don't allow: jquery/jquery-license@fdb6b24. Could you please sign with your real email and update the git config? Thanks!

@hubgit hubgit force-pushed the patch-1 branch 2 times, most recently from 3a62dac to 3e345bd Compare March 30, 2015 15:13
@hubgit hubgit force-pushed the patch-1 branch 2 times, most recently from 0a47015 to 537e3f5 Compare April 5, 2015 23:36
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

just reference the file directly from http://code.jquery.com in the script tag:

Should we update this one as well?

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ping @hubgit. Would love to be able to land this.

@hubgit
Copy link
Author

hubgit commented Apr 17, 2015

Updated to convert as many URLs as possible to HTTPS (if that's too much I can just make the single change, but these might as well be updated at some point).

@hubgit
Copy link
Author

hubgit commented May 24, 2015

@arthurvr This should be ok now?

@mgol
Copy link
Member

mgol commented Jun 29, 2015

So, are we doing it? I think it's a good change. @kborchers, AFAIK you had some opinions here? :)

@kborchers
Copy link
Member

As long as the links work I am fine with this change. The specific incident that got me involved was with a protocol-relative link to sizzlejs.com from https which caused the link to be broken as there is no cert for sizzlejs.com

@hubgit
Copy link
Author

hubgit commented Aug 14, 2015

Updated to fix merge conflicts.

@dmethvin
Copy link
Member

Fixed in e37ea3f .

@dmethvin dmethvin closed this Apr 14, 2016
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

Use https for download links

6 participants