bttmly / nba

Node.js client for nba.com API endpoints

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

A fix for HTTP being blocked (Mix Content Error)

liufud opened this issue · comments

This is more of a suggestion than an issue. If you host your app using HTTPS, and ran into this error in the browser

Mixed Content: The page at 'https://somedevapp.azurewebsites.net/#/managesomething' was loaded over HTTPS, but requested an insecure XMLHttpRequest endpoint 'http://admindevapp.azurewebsites.net/api/data/getdata'. This request has been blocked; the content must be served over HTTPS.

Try adding <meta http-equiv="Content-Security-Policy" content="upgrade-insecure-requests"> to the <head> tag in your HTML
https://stackoverflow.com/questions/52130918/web-api-error-this-request-has-been-blocked-the-content-must-be-served-over-h

Hope this helps!

I'm not sure I understand the problem being addressed here? The NBA's API CORS policy generally prohibits you from using this package directly in the browser; as such, browser compatibility is no longer a goal here. This package is primarily intended to be used from Node.js; if it works in the browser, great, but otherwise I'm not too worried about it