enforce http with JavaScript

Question

I have a srcURL variable which gets a path of the form /myFolder/myFile.jpg

Now this gets assigned to the img element..which obviously would call it with the complete path https://mySite.com/myFolder/myFile.jpg

Now I somehow want the https to be replaced/enforced with http using Javascript..

I am not sure if I can do this with the "replace()" method since I only get the path "/myFolder/myFile.jpg" in the srcURL variable and not with https..

How can I do that?

Well..I am not 1005 sure on that...But there is a function function AudioData(section, url) { this.section = section; this.url = url; } — copenndthagen
– copenndthagen, Commented Jun 10, 2011 at 13:12
Doesn't mixing https and http elements cause ''insecure elements'' error in IE? — Grzegorz Gierlik
– Grzegorz Gierlik, Commented Jun 10, 2011 at 13:19
@Grzegorz: It's not an error, it's a warning and I think the user can turn that off in advanced settings, but it is on by default. — vol7ron
– vol7ron, Commented Jun 10, 2011 at 13:21

vol7ron · Accepted Answer · 2011-06-10 13:16:28Z

3

You are using a relative path. You need to use an explicit path when setting the src of the URL.

srcURL = '/myFolder/myFile.jpg';
srcURL = 'http://' + window.location.host + srcURL;

// srcURL == 'http://<yourdomainname>/myFolder/myFile.jpg'

Note: you'll probably get a warning message saying some parts of your page may be unsecure.

answered Jun 10, 2011 at 13:16

vol7ron

42.3k22 gold badges126 silver badges178 bronze badges

Sign up to request clarification or add additional context in comments.

3 Comments

copenndthagen Over a year ago

Hi there..you seem to have hit the nail on the head..works perfect..my only question is if this is indeed a good practice..in my case, i m unqble to access the resource via https..so in case this is not a good practice or there is some risk, i can think along diff line..

vol7ron Over a year ago

I believe this depends on what the content of the image is. All HTTPS does is add a SSL layer of encryption over HTTP, which is isn't all that secure. Basically, it's like taking your loan application that's sitting on your desk, which has your Social Security # and private information exposed, and putting it in an envelope so that those people that might see it as they pass by, won't. This does not stop those people that want to see it, as all they have to do is open the envelope. Images, though, are compressed, so they kind of are encrypted and don't need the extra basic SSL layer.

vol7ron Over a year ago

To answer your question, it's an okay practice and happens all the time. Most of the time you see those messages that state "information on this page may be unsecure" is due to the images.

Mike Thomsen · Accepted Answer · 2011-06-10 13:09:07Z

1

If you want to enforce plain HTTP, you should write a rewrite rule on the server to forward any HTTPS request for an image to the HTTP equivalent. On the client side, simply doing this would be sufficient (but you really need the back end piece too):

url.replace("https", "http");

answered Jun 10, 2011 at 13:09

Mike Thomsen

37.7k11 gold badges63 silver badges86 bronze badges

2 Comments

Marcel Korpel Over a year ago

He can't do it on the client side: “I am not sure if I can do this with the "replace()" method since I only get the path "/myFolder/myFile.jpg" in the srcURL variable and not with https”

copenndthagen Over a year ago

Hi Mike...I actually want this to happen only in 1 place (i.e. the specific image) on only 1 page..So will the server setting not make a global impact..something which I do not want..

Collectives™ on Stack Overflow

enforce http with JavaScript

2 Answers 2

3 Comments

2 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

3 Comments

2 Comments

Your Answer

Sign up or log in

Post as a guest

Related