Merge pull request #1660 from PrivateBin/httpssecure

Make sure legacy check returns true only on HTTPS (not like ftp or whatever)
This commit is contained in:
El RIDO 2025-09-30 20:40:28 +02:00 committed by GitHub
commit 9910b6f2a3
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -106,8 +106,8 @@
return window.isSecureContext;
}
// HTTP is obviously insecure
if (window.location.protocol !== 'http:') {
// HTTPS is considered secure
if (window.location.protocol === 'https:') {
return true;
}