我可以创建一个既可以使用HTTP又可以使用HTTPS的javascript文件

Question

I have not been able to find a correct answer for this one. I have a script, let's call it http://www.example.com/testing.js which I used over several sites that are HTTP served. Now I have two new site that are HTTPS served and when I add the file <script src="http://www.example.com/testing.js"></script> I get the following error

Mixed Content: The page at 'https://location.mysite.com/my-account' was loaded over HTTPS, but requested an insecure script 'http://www.example.com/testing.js'. 

This request has been blocked; the content must be served over HTTPS.

I want to use the same file over HTTPS and HTTP, what do I need to change or add to my javascript to serve both of them?

Answer 1

You should call the file like so:

<script src="//www.example.com/testing.js"></script>

It will automatically choose protocol according to the page's protocol. That is the reason there is no protocol in the code I gave.

BUT REMEMBER This will only work if your domain www.example.com can also be served over https:// i.e has SSL support