soscripted / sox

Stack Overflow Extras: a userscript for the Stack Exchange websites to add a bunch of optional toggle-able features
http://stackapps.com/q/6091/
MIT License
72 stars 15 forks source link

SOX HTTPS issues #266

Closed shu8 closed 7 years ago

shu8 commented 7 years ago

This Meta post Network-wide HTTPS: It's time shows that SE are now moving to HTTPS, so we need to make sure no links are HTTP throughout SOX now.

List of things to check (please add some if you can think of any):

j-f1 commented 7 years ago

You might also want to use task lists:

shu8 commented 7 years ago

Done in dev 2.0.28.

Please comment here if you see any HTTPS warnings in the console! :)

SathyaBhat commented 7 years ago

On questions which have been edited, https/mixed mode errors are still shown

Ex URL: https://superuser.com/questions/1235710/access-crontab-process-in-a-terminal-using-ssh

Refused to connect to 'http://superuser.com/posts/1235710/revisions' because it violates the following Content Security Policy directive: "default-src https: wss: data: blob: 'unsafe-eval' 'unsafe-inline'". Note that 'connect-src' was not explicitly set, so 'default-src' is used as a fallback.

Mixed Content: The page at 'https://superuser.com/questions/1235710/access-crontab-process-in-a-terminal-using-ssh' was loaded over HTTPS, but requested an insecure XMLHttpRequest endpoint 'http://superuser.com/posts/1235710/revisions'. This request has been blocked; the content must be served over HTTPS.

I guess it comes from here https://github.com/soscripted/sox/blob/master/sox.features.js#L1034

shu8 commented 7 years ago

@SathyaBhat Thanks for bringing that up! I'm away for a few weeks but I'll get this fixed ASAP! :)

shu8 commented 7 years ago

@SathyaBhat should be fixed in dev 2.0.39 :) sorry for the delay!

SathyaBhat commented 7 years ago

No problem. thanks for fixing