This repository has been archived by the owner on Jul 20, 2018. It is now read-only.

Verify that Google Fonts are loaded via HTTPS #286

Open

fklein-lu opened this issue Jul 6, 2015 · 0 comments

Labels

enhancement static analysis

Milestone

Contributor

fklein-lu commented Jul 6, 2015

Google recommends loading fonts via HTTPS:

We recommend that you load libraries from the CDN via HTTPS, even if your own website only uses HTTP. Nowadays, performance is fast, and caching works just the same. The CDN's files are served with CORS and Timing-Allow headers and allowed to be cached for 1 year.

We should implement a check for this.

fklein-lu added enhancement static analysis labels

fklein-lu added this to the 0.8 milestone

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.