Reviewers: felix8a,

Description:
If a client does not provide a cajaServer or resources explicitly in
config,
we should use https instead of http to avoid mixed content errors.

Please review this at http://codereview.appspot.com/5820058/

Affected files:
  M     src/com/google/caja/plugin/caja.js


Index: src/com/google/caja/plugin/caja.js
===================================================================
--- src/com/google/caja/plugin/caja.js  (revision 4805)
+++ src/com/google/caja/plugin/caja.js  (working copy)
@@ -23,7 +23,7 @@

 var caja = (function () {
   var cajaBuildVersion = '%VERSION%';
-  var defaultServer = 'http://caja.appspot.com/';
+  var defaultServer = 'https://caja.appspot.com/';
   var defaultFrameGroup;
   var readyQueue = [];
   var registeredImports = [];


Reply via email to