Closed benlk closed 6 years ago
A question before merging: do any of these other references to insecure URLs need to be changed?
./classes/NPRAPI.php: const NPRAPI_PULL_URL = 'http://api.npr.org';
./classes/NPRAPI.php: const NPRML_NAMESPACE = 'xmlns:nprml=http://api.npr.org/nprml';
./classes/NPRAPIWordpress.php: * The path part of the request URL (i.e., http://example.com/PATH).
./ds-npr-api.php: $def_url = 'http://api.npr.org';
./get_stories.php: if ( stristr( $query_string, 'http:' ) ) {
./settings_ui.php: <div><p>Create an NPR API query (see the <a target="_" href="http://www.npr.org/api/queryGenerator.php">NPR API query generator</a>). Enter your queries into one of the rows below to have stories on that query automatically publish to your site. Please note, you do not need to include your API key to the query. </div>
./tests/test-ds-npr-api.php: $this->assertEquals( $option, 'http://api.npr.org' );
Hi Ben -
All of NPR's website links (including API calls) are generally now HTTPS. In fact if you find any that aren't HTTPS let me know! So, we should update all of the URL's to be HTTPS to eliminate unnecessary redirects.
Cool, I'll update this pull request with https urls for all the NPR links, where those links can be updated.
Of note:
http:
URLs like http://api.npr.org/query?id=1139&apiKey=demo
Thanks for all of these documentation edits! Other than the one URL that was still marked as HTTP this looks good.
That must've happened when I merged https://github.com/npr/nprapi-wordpress/commit/f4032ce35af448a9800f6412884f483ca986819f into this branch; my bad. It's fixed now.
Just wanted to mention that I'm good with this pull request!
Changes
(edited)
http:
URLs in the plugin withhttps:
URLsWhy
From the update document:
For https://github.com/INN/WP-DS-NPR-API/issues/11