Skip to content

Fix protocol-relative URL to use explicit HTTPS#140

Draft
Copilot wants to merge 2 commits into
gh-pagesfrom
copilot/fix-http-to-https
Draft

Fix protocol-relative URL to use explicit HTTPS#140
Copilot wants to merge 2 commits into
gh-pagesfrom
copilot/fix-http-to-https

Conversation

Copy link
Copy Markdown
Contributor

Copilot AI commented Feb 4, 2026

Protocol-relative URL //assets.okfn.org/images/icons/ajaxload-circle.gif causes mixed content warnings when served over HTTPS.

Changes

  • list.js: Changed loading spinner image URL from //assets.okfn.org/... to https://assets.okfn.org/...
  • README.md: Updated documentation in "Enabling HTTPS" section to reference HTTPS URL
// Before
listing_element.innerHTML = '<img src="//assets.okfn.org/images/icons/ajaxload-circle.gif" />';

// After  
listing_element.innerHTML = '<img src="https://assets.okfn.org/images/icons/ajaxload-circle.gif" />';
Original prompt

This section details on the original issue you should resolve

<issue_title>it should be https in place of http to avoid security issues</issue_title>
<issue_description>

var BUCKET_URL = 'http://' + location.hostname + '.' + S3_REGION + '.amazonaws.com'; // e.g. just 's3' for us-east-1 region
</issue_description>

<agent_instructions>please check if this issue still exists and if so fix it.</agent_instructions>

Comments on the Issue (you are @copilot in this section)

@rufuspollock @maheshyamsani what security issues here exactly and do you want to do a PR? @rufuspollock OK, so can submit a PR.

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

Co-authored-by: rufuspollock <180658+rufuspollock@users.noreply.github.com>
Copilot AI changed the title [WIP] Fix HTTP to HTTPS for enhanced security Fix protocol-relative URL to use explicit HTTPS Feb 4, 2026
Copilot AI requested a review from rufuspollock February 4, 2026 15:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

it should be https in place of http to avoid security issues

2 participants