Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[documentation] Add recommendation to use https #147

Open
GoogleCodeExporter opened this issue May 5, 2015 · 0 comments
Open

[documentation] Add recommendation to use https #147

GoogleCodeExporter opened this issue May 5, 2015 · 0 comments

Comments

@GoogleCodeExporter
Copy link

Just stumbled across this project and I find it very interesting.

However, i noticed that in the project home, all examples load the JS file 
using plain HTTP.
It's true that one using this library probably can figure out by himself, but I 
believe it would be wise to update those examples to use HTTPS instead 
(googlecode is also available under HTTPS) and perhaps add a recommendation to 
use HTTPS on *all* components of a security-sensitive web application (at least 
all components that may contain javascript, like html and js files).

The reason is quite simple: plain HTTP is subject to man-in-the-middle attacks, 
so an attacker could easily inject malitious code into the client's browser 
(say, pretending he is code.google.com) and grab the sensitive information.

Original issue reported on code.google.com by [email protected] on 22 Feb 2015 at 10:06

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant