From 0a45b7b1b375fdc088cdbbc9908928755362c756 Mon Sep 17 00:00:00 2001
From: Victor Boctor <victor@mantishub.net>
Date: Sat, 15 Aug 2015 10:01:28 -0700
Subject: [PATCH] Use protocol-less urls to reference CDN

Fixes #19932
---
 core/html_api.php | 6 +++---
 core/http_api.php | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/core/html_api.php b/core/html_api.php
index 298e19eb0a..168806cfe0 100644
--- a/core/html_api.php
+++ b/core/html_api.php
@@ -367,7 +367,7 @@ function html_css() {
 	html_css_link( config_get( 'css_include_file' ) );
 
 	if ( config_get( 'cdn_enabled' ) == ON ) {
-		echo '<link rel="stylesheet" href="https://ajax.googleapis.com/ajax/libs/jqueryui/1.11.4/themes/smoothness/jquery-ui.css">' . "\n";
+		echo '<link rel="stylesheet" href="//ajax.googleapis.com/ajax/libs/jqueryui/1.11.4/themes/smoothness/jquery-ui.css">' . "\n";
 	} else {
 		html_css_link( 'jquery-ui-1.11.4.min.css' );
 	}
@@ -447,8 +447,8 @@ function html_head_javascript() {
 	echo "\t" . '<script type="text/javascript" src="' . helper_mantis_url( 'javascript_translations.php' ) . '"></script>' . "\n";
 
 	if ( config_get( 'cdn_enabled' ) == ON ) {
-		echo "\t" . '<script src="https://ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js"></script>' . "\n";
-		echo "\t" . '<script src="https://ajax.googleapis.com/ajax/libs/jqueryui/1.11.4/jquery-ui.min.js"></script>' . "\n";
+		echo "\t" . '<script src="//ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js"></script>' . "\n";
+		echo "\t" . '<script src="//ajax.googleapis.com/ajax/libs/jqueryui/1.11.4/jquery-ui.min.js"></script>' . "\n";
 	} else {
 		html_javascript_link( 'jquery-1.11.3.min.js' );
 		html_javascript_link( 'jquery-ui-1.11.4.min.js' );
diff --git a/core/http_api.php b/core/http_api.php
index ffa3b8a2bb..d998c5c53f 100644
--- a/core/http_api.php
+++ b/core/http_api.php
@@ -167,7 +167,7 @@ function http_security_headers() {
 
 		# White list the CDN urls (if enabled)
 		if ( config_get( 'cdn_enabled' ) == ON ) {
-			$t_cdn_url = 'https://ajax.googleapis.com';
+			$t_cdn_url = '//ajax.googleapis.com';
 			$t_style_src .= " $t_cdn_url";
 			$t_script_src .= " $t_cdn_url";
 		}