I have a page that references a couple of externally hosted javascript files – namely, jQuery on Google and YUI using YUI Loader.
The trouble is when I access the page via HTTPS the browser complains of mixed insecure content, since the external javascript files are being accessed using http instead of https.
What’s a good way to deal with this, accessing the external jQuery and YUI Loader objects with HTTPS?
Assuming the CDN provider has an https version, you can use protocol-relative URLs.
For example, instead of:
…you can use:
The browser will use the page’s protocol to try to obtain the file. On non-secure pages, http. On secure pages, https.
Google also makes YUI Loader available through its CDN. So for YUI this works fine:
…in both http and https contexts.