Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Make these various links secure #278

Merged
merged 1 commit into from Mar 6, 2021
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
2 changes: 1 addition & 1 deletion CHANGELOG.rst
@@ -1,4 +1,4 @@
Change Log
==========

Please see the `documentation <http://whitenoise.evans.io/en/stable/changelog.html>`_.
Please see the `documentation <https://whitenoise.evans.io/en/stable/changelog.html>`_.
4 changes: 2 additions & 2 deletions README.rst
Expand Up @@ -46,5 +46,5 @@ Asked Questions`_.

To get started, see the documentation_.

.. _Infrequently Asked Questions: http://whitenoise.evans.io/en/stable/#infrequently-asked-questions
.. _documentation: http://whitenoise.evans.io/en/stable/
.. _Infrequently Asked Questions: https://whitenoise.evans.io/en/stable/#infrequently-asked-questions
.. _documentation: https://whitenoise.evans.io/en/stable/
2 changes: 1 addition & 1 deletion docs/base.rst
Expand Up @@ -237,7 +237,7 @@ sub-classing WhiteNoise and setting the attributes directly.
The W3C `explicitly state`__ that this behaviour is safe for publicly
accessible files.

.. __: http://www.w3.org/TR/cors/#security
.. __: https://www.w3.org/TR/cors/#security

.. attribute:: add_headers_function

Expand Down
4 changes: 2 additions & 2 deletions docs/changelog.rst
Expand Up @@ -300,7 +300,7 @@ v3.2
* Fixed a bug where incorrect Content-Type headers were being sent on 304 Not
Modified responses (thanks `@oppianmatt <https://github.com/oppianmatt>`_).
* Return Vary and Cache-Control headers on 304 responses, as specified by the
`RFC <http://tools.ietf.org/html/rfc7232#section-4.1>`_.
`RFC <https://tools.ietf.org/html/rfc7232#section-4.1>`_.

v3.1
----
Expand Down Expand Up @@ -334,7 +334,7 @@ v3.0
import path **will continue to work** for now, but users are encouraged
to update their code to use the new path.

.. _WhiteNoise 2.x: http://whitenoise.evans.io/en/legacy-2.x/
.. _WhiteNoise 2.x: https://whitenoise.evans.io/en/legacy-2.x/


Simpler, cleaner Django middleware integration
Expand Down
2 changes: 1 addition & 1 deletion docs/django.rst
Expand Up @@ -720,7 +720,7 @@ Deploying an application which is not at the root of the domain
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Sometimes Django apps are deployed at a particular prefix (or "subdirectory")
on a domain e.g. http://example.com/my-app/ rather than just http://example.com.
on a domain e.g. https://example.com/my-app/ rather than just https://example.com.

In this case you would normally use Django's `FORCE_SCRIPT_NAME
<https://docs.djangoproject.com/en/1.11/ref/settings/#force-script-name>`_
Expand Down
2 changes: 1 addition & 1 deletion docs/flask.rst
Expand Up @@ -96,7 +96,7 @@ By default, WhiteNoise will serve up static files from the URL root --
i.e., ``http://localhost:5000/style.css``.

To change that, set a `prefix
<http://whitenoise.evans.io/en/stable/base.html#whitenoise-api>`_ string:
<https://whitenoise.evans.io/en/stable/base.html#whitenoise-api>`_ string:

.. code-block:: python

Expand Down
2 changes: 1 addition & 1 deletion setup.py
Expand Up @@ -24,7 +24,7 @@ def read(*path):
version=version,
author="David Evans",
author_email="d@evans.io",
url="http://whitenoise.evans.io",
url="https://whitenoise.evans.io",
packages=find_packages(exclude=["tests*"]),
license="MIT",
description="Radically simplified static file serving for WSGI applications",
Expand Down
2 changes: 1 addition & 1 deletion whitenoise/base.py
Expand Up @@ -38,7 +38,7 @@ class WhiteNoise(object):
max_age = 60
# Set 'Access-Control-Allow-Orign: *' header on all files.
# As these are all public static files this is safe (See
# http://www.w3.org/TR/cors/#security) and ensures that things (e.g
# https://www.w3.org/TR/cors/#security) and ensures that things (e.g
# webfonts in Firefox) still work as expected when your static files are
# served from a CDN, rather than your primary domain.
allow_all_origins = True
Expand Down
2 changes: 1 addition & 1 deletion whitenoise/django.py
Expand Up @@ -2,6 +2,6 @@
"\n\n"
"Your WhiteNoise configuration is incompatible with WhiteNoise v4.0\n"
"This can be fixed by following the upgrade instructions at:\n"
"http://whitenoise.evans.io/en/stable/changelog.html#v4-0\n"
"https://whitenoise.evans.io/en/stable/changelog.html#v4-0\n"
"\n"
)
2 changes: 1 addition & 1 deletion whitenoise/responders.py
Expand Up @@ -19,7 +19,7 @@
)

# Headers which should be returned with a 304 Not Modified response as
# specified here: http://tools.ietf.org/html/rfc7232#section-4.1
# specified here: https://tools.ietf.org/html/rfc7232#section-4.1
NOT_MODIFIED_HEADERS = (
"Cache-Control",
"Content-Location",
Expand Down