2015-02-05 16:18 GMT-03:00 Max Leske <[email protected]>:
> Addendum: I suspect that this practice will prevent CORS problems. If a page
> uses https to get the script for instance and the script calls another url
> on the same server but with http only, the request will fail (that’s a known
> problem with some of the Facebook scripts).

Exactly.

Plus the references are also independent of the requested transport
protocol (HTTP or HTTPS), so if the request starts on HTTP and no
automatic redirection to HTTPS is applied, all links continue to work,
as well as if the first request happens with HTTPS.

Regards!

Reply via email to