WordPress.org

Plugin Reviews

Workbox Video from Vimeo & Youtube Plugin

Quick and easy way to add and manage videos on your site or blog. Supports Vimeo, Wistia, YouTube.

1 review
Average Rating
3.6 out of 5 stars
You are currently viewing the reviews that provided a rating of 1 star. Click here to see all reviews.
Breaks SSL with static HTTP include
By , for WP 4.3.1

In workbox-video-from-vimeo-youtube-plugin/workbox_video.php there is a line of PHP that enqueues jQuery externally from ajax.googleapis.com with a static unsecured (HTTP) URL.
wp_enqueue_script('jquery', '//ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js');

I'm not sure that it's the best practice to include external jQuery libraries when WordPress already include the core jQuery files internally. Regardless, this link breaks the SSL certificate on my site because of a "Mixed Content" error. I fixed this by simply removing the "http:" from the link so that it will dynamically switch from HTTP to HTTPS depending on the URL used to render my site. This may not be the most comprehensive solution, and it is still loading this resource externally when an internal reference might be smarter, but this was my quick fix:
wp_enqueue_script('jquery', '//ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js');

Please fix this in the next release so that I can download your updates without breaking my site again!

Thanks.

P.S. More stars are awaiting your positive response and resolution ;-)

You must log in to submit a review. You can also log in or register using the form near the top of this page.