Weather App Securty Problem HTTPS

Weather App Securty Problem HTTPS
0.0 0

#1

I just finished the weather app. and I post it on code pen, but it didn’t work there. It was working on my laptop. I check the console and it turned out that the site that I used it doesn’t support https.
Should I do another App?
Or it is OK as long as it is working without https?
https://codepen.io/guypro/pen/vJWeaE?editors=0111


#2

It would be ok in 2015.
Now all browser vendors are forcing https everywhere. So in 2017 I would say your project must work via https.

One solution is to prefix the url you are calling with https://cors-anywhere.herokuapp.com/ so it looks like this:

https://cors-anywhere.herokuapp.com/http://some-url-without-https.com

But it’s not a real solution, just a hack.


#3

Thank you for your comment!
cors-anywhere.herokuapp.com
Worked partially on my laptop, but not on code pen.
Here is what I did:
weather = new XMLHttpRequest();
var x = “http://api.wunderground.com/api/my_key/” + sta + ‘/’ + “.json”;
var y = “https://cors-anywhere.herokuapp.com/”;
var url= y + x;