From: Dan S. <dst...@zo...> - 2014-04-11 22:21:26
|
On 4/11/14, 11:59 AM, Rintze Zelle wrote: > Agreed. The main requirement is that the style "self"-link should > resolve to an online copy of the style, and that won't be a problem if > we stick to using "http". Just to make sure this is what you're saying, the rel="self" links for Zotero-hosted styles can and should be "https". It's just the ids that should stay as "http". Zotero actually makes a single request that includes the ids when it updates styles from the Zotero repo, but a client that updates each style directly shouldn't need to trigger unnecessary redirects (and, in theory, expose itself to some sort of XML-parsing exploit or other mischief). rel="independent-parent" should also be "https", since that's used for retrieval rather than identification. (There's no particular need to mass-change old styles, though.) |