BlocklyProp
BlocklyProp copied to clipboard
Update Download File URL to support HTTPS
The blocklyprop.properties file contains a single definition to indicate the location of the BlocklyProp Client download files.
downloadfiles.baseurl = http://blockly.example.com/download
When the site is accessed via HTTPS, this link will cause modern browsers to warn the user that there may be insecure content on the page. There are at least two options to resolve to resolve this issue
-
Remove the protocol portion of the URL in the configuration file and allow the application to figure out which protocol to use.
-
Add a second configuration option in the blocklyprop.properties file for each protocol.
downloadfiles.baseurl = http://blockly.example.com/download
downloadfiles.baseurl.https = https://blockly.example.com/download
Suggestions are appreciated.
If option 1 works reliably, I'd choose that one because it seems it would allow a more natural transition for when we officially switch everything to https.
Based on testing on the demo site, we can move downloads to HTTPS before the main site moves over the HTTPS. Going the other way is what breaks in current browsers.
Option 1 it is then.
@zfi can this be closed?
We are currently using option 2 because we have not yet resolved migrating clients to a full HTTPS stack. I think we need to resolve that issue before we can close this issue.
Gotcha, thanks.
Matthew Matz | STEM/Robotics Educator Parallax Inc. | Direct: 916-625-3019 | www.parallax.com | @M atzElectronics http://twitter.com/MatzElectronics
On Mon, Aug 21, 2017 at 11:27 PM, Jim Ewald [email protected] wrote:
We are currently using option 2 because we have not yet resolved migrating clients to a full HTTPS stack. I think we need to resolve that issue before we can close this issue.
— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/parallaxinc/BlocklyProp/issues/979#issuecomment-323931617, or mute the thread https://github.com/notifications/unsubscribe-auth/AS0quKBrJ58vI3j1ALERl8oZxanh7g1nks5sanTEgaJpZM4MyGTG .