Mixed content blocked, https protected admin area

I’m not sure when this started, I evaluated this plugin on a test-site that is not using https, but the production site has the backend running on https only.
The OSM plugin does not show a map and therefor no shortcode generation can be done. The reason for this seems to be that the plugin loads code, js and css both from the wordpress plugin directory as well as external code via http. But as the backend runs on https, the browsers nowadaways will block this attempt for loading mixed content.
With firebug it’s easy to find the content that isn’t loaded:
http://www.<mysite>/wp-content/plugins/osm//css/osm_map.css
http://openlayers.org/api/2.12/OpenLayers.js
http://www.openstreetmap.org/openlayers/OpenStreetMap.js
http://maps.google.com/maps/api/js?sensor=false
http://www.<mysite>/wp-content/plugins/osm/js/osm-plugin-lib.js

So it seems that the OSM plugin generate the loading URL’s without checking whether the backend runs on https.

I hope you can fix this, currently the OSM plugin is unusable with a https backend.

I briefly checked the various sites: the code from maps.google.com is reachable via https as well as openstreetmap.org. But openlayers.org is not on https… you may have to bundle the code with your plugin. Which is suggested by openlayers anyways, it’s opensource, so that is no problem.

Kind Regards, Herbert

http://wordpress.org/plugins/osm/