vlc | branch: master | Pierre Ynard <[email protected]> | Fri Aug  7 19:19:54 
2020 +0200| [49cddd79e05a7280914b4124c9dba3cabb7a8d80] | committer: Pierre Ynard

lua/http: use HTTPS to link to third-party web assets from frontend

This is recommended good practice, as it improves security. This is also
necessary to serve VLC's web interface frontend over HTTPS.

Fixes #21216

Based on a patch from Noam Lerner <[email protected]>, thanks!

> http://git.videolan.org/gitweb.cgi/vlc.git/?a=commit;h=49cddd79e05a7280914b4124c9dba3cabb7a8d80
---

 share/lua/http/dialogs/stream_config_window.html | 2 +-
 share/lua/http/index.html                        | 8 ++++----
 share/lua/http/js/ui.js                          | 4 ++--
 share/lua/http/mobile.html                       | 6 +++---
 share/lua/http/mobile_browse.html                | 4 ++--
 share/lua/http/mobile_equalizer.html             | 4 ++--
 share/lua/http/mobile_view.html                  | 8 ++++----
 share/lua/http/view.html                         | 8 ++++----
 8 files changed, 22 insertions(+), 22 deletions(-)

diff --git a/share/lua/http/dialogs/stream_config_window.html 
b/share/lua/http/dialogs/stream_config_window.html
index d219c6d403..12737aa190 100644
--- a/share/lua/http/dialogs/stream_config_window.html
+++ b/share/lua/http/dialogs/stream_config_window.html
@@ -8,7 +8,7 @@
                                "<?vlc gettext("Okay") ?>":function(){
                                        $('#player').empty();
                                        
$('#player').attr('href',$('#stream_protocol').val()+'://'+$('#stream_host').val()+':'+$('#stream_port').val()+'/'+$('#stream_file').val());
-                                       flowplayer("player", 
"http://releases.flowplayer.org/swf/flowplayer-3.2.7.swf";);
+                                       flowplayer("player", 
"https://releases.flowplayer.org/swf/flowplayer-3.2.7.swf";);
                                        $(this).dialog('close');
                                },
                                "<?vlc gettext("Cancel") ?>":function(){
diff --git a/share/lua/http/index.html b/share/lua/http/index.html
index 4a8a4ff51c..c96d411d95 100644
--- a/share/lua/http/index.html
+++ b/share/lua/http/index.html
@@ -36,8 +36,8 @@
                </script>
                <link type="text/css" 
href="css/ui-lightness/jquery-ui-1.8.13.custom.css" rel="stylesheet" />
                <link type="text/css" href="css/main.css" rel="stylesheet" />
-               <script type="text/javascript" 
src="http://ajax.googleapis.com/ajax/libs/jquery/1.6.1/jquery.min.js";></script>
-               <script type="text/javascript" 
src="http://ajax.googleapis.com/ajax/libs/jqueryui/1.8.13/jquery-ui.min.js";></script>
+               <script type="text/javascript" 
src="https://ajax.googleapis.com/ajax/libs/jquery/1.6.1/jquery.min.js";></script>
+               <script type="text/javascript" 
src="https://ajax.googleapis.com/ajax/libs/jqueryui/1.8.13/jquery-ui.min.js";></script>
                <script type="text/javascript" 
src="js/jquery.jstree.js"></script>
                <script type="text/javascript" src="js/ui.js"></script>
                <script type="text/javascript" src="js/controllers.js"></script>
@@ -189,9 +189,9 @@
                                $('#viewContainer').animate({height: 'toggle'});
                        });
                        /* delay script loading so we won't block if we have no 
net access */
-                       
$.getScript('http://releases.flowplayer.org/js/flowplayer-3.2.6.min.js', 
function(data, textStatus){
+                       
$.getScript('https://releases.flowplayer.org/js/flowplayer-3.2.6.min.js', 
function(data, textStatus){
                                $('#player').empty();
-                               flowplayer("player", 
"http://releases.flowplayer.org/swf/flowplayer-3.2.7.swf";);
+                               flowplayer("player", 
"https://releases.flowplayer.org/swf/flowplayer-3.2.7.swf";);
                                /* .getScript only handles success() */
                         });
                //]]>
diff --git a/share/lua/http/js/ui.js b/share/lua/http/js/ui.js
index 3950bf056c..83e5c23294 100644
--- a/share/lua/http/js/ui.js
+++ b/share/lua/http/js/ui.js
@@ -69,7 +69,7 @@ $(function () {
                 break;
             case 'stream':
                 sendVLMCmd('control Current play');
-                flowplayer("player", 
"http://releases.flowplayer.org/swf/flowplayer-3.2.7.swf";);
+                flowplayer("player", 
"https://releases.flowplayer.org/swf/flowplayer-3.2.7.swf";);
                 break;
             }
         } else {
@@ -102,7 +102,7 @@ $(function () {
         }
         var urlimg = location.href + 'mobile.html';
         var codeimg = $('<img width="350" height="350" alt="qrcode"/>');
-        codeimg.attr('src', 
'http://chart.apis.google.com/chart?cht=qr&chs=350x350&chld=L&choe=UTF-8&chl=' 
+ encodeURIComponent(urlimg));
+        codeimg.attr('src', 
'https://chart.apis.google.com/chart?cht=qr&chs=350x350&chld=L&choe=UTF-8&chl=' 
+ encodeURIComponent(urlimg));
         codeimg.dialog({width: 350, height: 350, title: 'QR-Code'});
         return false;
     });
diff --git a/share/lua/http/mobile.html b/share/lua/http/mobile.html
index efac88c3ab..31b932f3dc 100644
--- a/share/lua/http/mobile.html
+++ b/share/lua/http/mobile.html
@@ -31,10 +31,10 @@
                <script type="text/javascript" src="js/common.js"></script>
                <link type="text/css" 
href="css/ui-lightness/jquery-ui-1.8.13.custom.css" rel="stylesheet" />
                <link type="text/css" href="css/mobile.css" rel="stylesheet" />
-               <script type="text/javascript" 
src="http://ajax.googleapis.com/ajax/libs/jquery/1.6.1/jquery.min.js";></script>
-               <script type="text/javascript" 
src="http://ajax.googleapis.com/ajax/libs/jqueryui/1.8.13/jquery-ui.min.js";></script>
+               <script type="text/javascript" 
src="https://ajax.googleapis.com/ajax/libs/jquery/1.6.1/jquery.min.js";></script>
+               <script type="text/javascript" 
src="https://ajax.googleapis.com/ajax/libs/jqueryui/1.8.13/jquery-ui.min.js";></script>
                <script type="text/javascript" 
src="js/jquery.jstree.js"></script>
-               <script type="text/javascript" 
src="http://releases.flowplayer.org/js/flowplayer-3.2.6.min.js";></script>
+               <script type="text/javascript" 
src="https://releases.flowplayer.org/js/flowplayer-3.2.6.min.js";></script>
                <script type="text/javascript" src="js/ui.js"></script>
                <script type="text/javascript" src="js/controllers.js"></script>
                <script type="text/javascript">
diff --git a/share/lua/http/mobile_browse.html 
b/share/lua/http/mobile_browse.html
index 51f65406c5..82e9997840 100644
--- a/share/lua/http/mobile_browse.html
+++ b/share/lua/http/mobile_browse.html
@@ -29,8 +29,8 @@
                <script type="text/javascript" src="js/common.js"></script>
                <link type="text/css" 
href="css/ui-lightness/jquery-ui-1.8.13.custom.css" rel="stylesheet" />
                <link type="text/css" href="css/main.css" rel="stylesheet" />
-               <script type="text/javascript" 
src="http://ajax.googleapis.com/ajax/libs/jquery/1.6.1/jquery.min.js";></script>
-               <script type="text/javascript" 
src="http://ajax.googleapis.com/ajax/libs/jqueryui/1.8.13/jquery-ui.min.js";></script>
+               <script type="text/javascript" 
src="https://ajax.googleapis.com/ajax/libs/jquery/1.6.1/jquery.min.js";></script>
+               <script type="text/javascript" 
src="https://ajax.googleapis.com/ajax/libs/jqueryui/1.8.13/jquery-ui.min.js";></script>
                <script type="text/javascript" 
src="js/jquery.jstree.js"></script>
                <script type="text/javascript" src="js/controllers.js"></script>
                <script type="text/javascript">
diff --git a/share/lua/http/mobile_equalizer.html 
b/share/lua/http/mobile_equalizer.html
index 7341109bce..4406741b65 100644
--- a/share/lua/http/mobile_equalizer.html
+++ b/share/lua/http/mobile_equalizer.html
@@ -29,8 +29,8 @@
                <script type="text/javascript" src="js/common.js"></script>
                <link type="text/css" 
href="css/ui-lightness/jquery-ui-1.8.13.custom.css" rel="stylesheet" />
                <link type="text/css" href="css/main.css" rel="stylesheet" />
-               <script type="text/javascript" 
src="http://ajax.googleapis.com/ajax/libs/jquery/1.6.1/jquery.min.js";></script>
-               <script type="text/javascript" 
src="http://ajax.googleapis.com/ajax/libs/jqueryui/1.8.13/jquery-ui.min.js";></script>
+               <script type="text/javascript" 
src="https://ajax.googleapis.com/ajax/libs/jquery/1.6.1/jquery.min.js";></script>
+               <script type="text/javascript" 
src="https://ajax.googleapis.com/ajax/libs/jqueryui/1.8.13/jquery-ui.min.js";></script>
                <script type="text/javascript" 
src="js/jquery.jstree.js"></script>
                <script type="text/javascript" src="js/controllers.js"></script>
                <script type="text/javascript">
diff --git a/share/lua/http/mobile_view.html b/share/lua/http/mobile_view.html
index f7660e31ae..69c288682d 100644
--- a/share/lua/http/mobile_view.html
+++ b/share/lua/http/mobile_view.html
@@ -29,18 +29,18 @@
                <script type="text/javascript" src="js/common.js"></script>
                <link type="text/css" 
href="css/ui-lightness/jquery-ui-1.8.13.custom.css" rel="stylesheet" />
                <link type="text/css" href="css/main.css" rel="stylesheet" />
-               <script type="text/javascript" 
src="http://ajax.googleapis.com/ajax/libs/jquery/1.6.1/jquery.min.js";></script>
-               <script type="text/javascript" 
src="http://ajax.googleapis.com/ajax/libs/jqueryui/1.8.13/jquery-ui.min.js";></script>
+               <script type="text/javascript" 
src="https://ajax.googleapis.com/ajax/libs/jquery/1.6.1/jquery.min.js";></script>
+               <script type="text/javascript" 
src="https://ajax.googleapis.com/ajax/libs/jqueryui/1.8.13/jquery-ui.min.js";></script>
                <script type="text/javascript" 
src="js/jquery.jstree.js"></script>
                <script type="text/javascript" src="js/controllers.js"></script>
                <script type="text/javascript" src="js/ui.js"></script>
                <script type="text/javascript">
                        var pollStatus  =       false;
                        /* delay script loading so we won't block if we have no 
net access */
-                       
$.getScript('http://releases.flowplayer.org/js/flowplayer-3.2.6.min.js', 
function(data, textStatus){
+                       
$.getScript('https://releases.flowplayer.org/js/flowplayer-3.2.6.min.js', 
function(data, textStatus){
                                $('#player').empty();
                                
$('#player').attr('href',$('#stream_protocol').val()+'://'+$('#stream_host').val()+':'+$('#stream_port').val()+'/'+$('#stream_file').val());
-                               flowplayer("player", 
"http://releases.flowplayer.org/swf/flowplayer-3.2.7.swf";);
+                               flowplayer("player", 
"https://releases.flowplayer.org/swf/flowplayer-3.2.7.swf";);
                                /* .getScript only handles success() */
                        });
                </script>
diff --git a/share/lua/http/view.html b/share/lua/http/view.html
index 07ddd0d6cf..a155ff7e53 100644
--- a/share/lua/http/view.html
+++ b/share/lua/http/view.html
@@ -29,9 +29,9 @@
        <link type="text/css" 
href="css/ui-lightness/jquery-ui-1.8.13.custom.css" rel="stylesheet" />
        <link type="text/css" href="css/main.css" rel="stylesheet" />
        <script type="text/javascript" src="js/common.js"></script>
-       <script type="text/javascript" 
src="http://ajax.googleapis.com/ajax/libs/jquery/1.6.1/jquery.min.js";></script>
-       <script type="text/javascript" 
src="http://ajax.googleapis.com/ajax/libs/jqueryui/1.8.13/jquery-ui.min.js";></script>
-       <script type="text/javascript" 
src="http://releases.flowplayer.org/js/flowplayer-3.2.6.min.js";></script>
+       <script type="text/javascript" 
src="https://ajax.googleapis.com/ajax/libs/jquery/1.6.1/jquery.min.js";></script>
+       <script type="text/javascript" 
src="https://ajax.googleapis.com/ajax/libs/jqueryui/1.8.13/jquery-ui.min.js";></script>
+       <script type="text/javascript" 
src="https://releases.flowplayer.org/js/flowplayer-3.2.6.min.js";></script>
        <script type="text/javascript">
        //<![CDATA[
        $(function(){
@@ -50,7 +50,7 @@
                });
                $('#player').empty();
                
$('#player').attr('href',$('#stream_protocol').val()+'://'+$('#stream_host').val()+':'+$('#stream_port').val()+'/'+$('#stream_file').val());
-               flowplayer("player", 
"http://releases.flowplayer.org/swf/flowplayer-3.2.7.swf";);
+               flowplayer("player", 
"https://releases.flowplayer.org/swf/flowplayer-3.2.7.swf";);
        });
        //]]>
        </script>

_______________________________________________
vlc-commits mailing list
[email protected]
https://mailman.videolan.org/listinfo/vlc-commits

Reply via email to