Resources not loaded on HTTPS
mksplg opened this issue · comments
When flatdoc is served using HTTPS, Firefox 23 and up and Chrome block the content with the message Blocked loading mixed active content "...".
Updating the links in the template solves most of the issues except the included font in theme-white's style.css.
Nice, anyone got a PR for this?
The resource links would need to be changed to github's raw URLs, e.g. https://raw.githubusercontent.com/rstacruz/flatdoc/gh-pages/v/0.8.1/flatdoc.js as links currently used in the template are redirected to http://ricostacruz.com which does not support https.
Unfortunately, ghbtns.com used in the template also does not support https yet, see mdo/github-buttons#61.
Oh, right. Forgot about that — gh-pages doesn't support HTTPS.
However, IIRC GitHub was pretty clear on not using https://raw.githubusercontent.com on production sites. Perhaps there isn't a good way around this afterall, unless you host it yourself.
You're right, https://raw.githubusercontent.com serves everything with content-type text/plain.
Wouldn't https on gh-pages work if http://ricostacruz.com supported it or is that not supported by the redirect? At least if the page is accessed with https://user.github.io/repository without redirects, https works fine.
Google Fonts is now loaded via HTTPS. c1dbf23
rawgit.com offers a free CDN for git repos, and it support HTTPS. You should be able to use this URL: