Error while running on a HTTPS website (Chrome only) about html_codesniffer

[sattes-faction]

I'm facing the same issue, why is this closed? Has it been fixed in the meantime?

[amercier]

Closed by mistake, re-opening

[luketw]

This is not a HTMLCS issue per se, and more a browser security issue. This is currently more a limitation on us using the GitHub Pages hosting for the bookmarklet, which does not support hosting via HTTPS as far as I know. Even if it did, I don't think you'd get any change in result because it might instead complain about the certificates potentially being different.

In Chrome's case, it should be throwing up a "shield" icon in the right hand side of the address bar saying it is blocked, where you can set it to load the script anyway. However, in my quick testing here it does not seem to be doing that all the time. Personally I think Firefox should be doing the same thing, but it seems to be more lenient on this count.

[sattes-faction]

I see... maybe it's possible to add a hint in the JavaScript and at least pop up an alert window? Or is this something that can't be catched? Right now I only know why it isn't working when opening up the console.

[luketw]

Hi, and apologies for the long delay in replying.

I'm not sure whether the issue is Chrome not letting HTMLCS inject itself in, or whether it is running JS code from outside the HTTPS context. If it's the latter, then there is not much that can be done, certainly not something that can be caught. I'll look into it.

[Jellyfrog]

Chrome wont allow injecting http-content in a https-world...

Easy fix is to edit the bookmark and change the http to // and it will work for both.

[pthorson]

I just modified the bookmarklet to have https: in the URL and it seems to be working fine now for my https site.

[luketw]

Pull #84 provided by Jellyfrog (using relative scheme - this is the same way the CDNs for the likes of jQuery) - combined with an update to Github's cert to make HTTPS (unofficially) supported on Github Pages sites - has now resolved this.