**Ed Summers** @edsu · 2018-06-04T22:25:26Z

Oh you know, searching through 20 years of CSS, JavaScript, HTML and source code for hard coded http URLs.

**varx (is elsewhere now)** @varx@i.write.codethat.sucks · Jun 04, 2018, 22:48

**varx (is elsewhere now)** @varx@i.write.codethat.sucks · Jun 04, 2018, 22:48

@edsu At least you can use that new-fangled Content-Security-Policy: upgrade-insecure-requests to fill in some of the gaps.

**Ed Summers** @edsu · Jun 05, 2018, 09:32

**Ed Summers** @edsu · Jun 05, 2018, 09:32

@varx it’s good to know that’s there, but it also feels good to be cleaning this stuff up.

**Allien** @allien@mstdn.io · Jun 05, 2018, 08:48

**Allien** @allien@mstdn.io · Jun 05, 2018, 08:48

@edsu haha, #y2018k almost made me fall of my chair; nice!