5 ms·

Hmmm... > Blocked loading mixed active content "http://code.jquery.com/jquery-latest.js" http://code.jquery.com/jquery-latest.js" > Blocked loading mixed acti

by rakoo 13y ago

Hmmm... > Blocked loading mixed active content "http://code.jquery.com/jquery-latest.js" http://code.jquery.com/jquery-latest.js" > Blocked loading mixed active content "http://connect.soundcloud.com/sdk.js" http://connect.soundcloud.com/sdk.js" You're trying to mix HTTPS and HTTP... I also see that your API key is there in clear. I hope no one can do any bad stuff in your name. Oh, and it looks like every action is sent to google for statistics ?

wdewind 13y ago
> I also see that your API key is there in clear. I hope no one can do any bad stuff in your name. To OP: The way to fix this is to have the JS make a request to your own server, have your own server make the request to Soundcloud and proxy it back to you. That way you don't have to put your key in the JS, you can keep it on your server.
- karangoeluw 13y ago
  Is there any way where it does not use a server? I really do not want to use a server here.
  - wdewind 13y ago
    Unfortunately not. Since all JS is going to be transferred to the client, if the key is in the JS the client has access to it.
karangoeluw 13y ago
Well the URLs are provided by SoundCloud and jQuery so there's nothing that I can do (other than hosting it myself). Yeah I just hope no one misuses it. Yes.
- rakoo 13y ago
  > Well the URLs are provided by SoundCloud and jQuery so there's nothing that I can do (other than hosting it myself). Drop the scheme [0], the browser will be smart enough to know whether to use http or https. [0] https://stackoverflow.com/questions/550038/is-it-valid-to-replace-http-with-in-a-script-src-http https://stackoverflow.com/questions/550038/is-it-valid-to-re...
  - karangoeluw 13y ago
    Apparently SC doesn't like it and for some reason the app is very slow after dropping the scheme.