Title: Not using https to load script
Last modified: July 14, 2020

---

# Not using https to load script

 *  Resolved [simondh](https://wordpress.org/support/users/simondh/)
 * (@simondh)
 * [5 years, 10 months ago](https://wordpress.org/support/topic/not-using-https-to-load-script/)
 * This plugin is loading a script using a protocol relative URI and so is vulnerable.
   Is there a fix? I have seen the previous suggested from a few years ago:
 * ([https://wordpress.stackexchange.com/questions/75887/how-to-get-path-to-images-in-the-uploads-folder-to-be-used-in-a-plugin](https://wordpress.stackexchange.com/questions/75887/how-to-get-path-to-images-in-the-uploads-folder-to-be-used-in-a-plugin))
 * …but that doesn’t work.
 * The page I need help with: _[[log in](https://login.wordpress.org/?redirect_to=https%3A%2F%2Fwordpress.org%2Fsupport%2Ftopic%2Fnot-using-https-to-load-script%2F%3Foutput_format%3Dmd&locale=en_US)
   to see the link]_

Viewing 2 replies - 1 through 2 (of 2 total)

 *  Plugin Author [Daniel Iser](https://wordpress.org/support/users/danieliser/)
 * (@danieliser)
 * [5 years, 8 months ago](https://wordpress.org/support/topic/not-using-https-to-load-script/#post-13386257)
 * [@simondh](https://wordpress.org/support/users/simondh/) – Not sure what you 
   mean, is there a specific asset your discussing? We use built in WP functions
   to generate file paths.
 * This is where we define the root url of all of our assets: [https://github.com/PopupMaker/Popup-Maker/blob/2842a10870df26633a354ad2e624025c6a9e9df6/popup-maker.php#L193](https://github.com/PopupMaker/Popup-Maker/blob/2842a10870df26633a354ad2e624025c6a9e9df6/popup-maker.php#L193)
 * As you can see used here to register our front end JS urls:
    [https://github.com/PopupMaker/Popup-Maker/blob/master/classes/Site/Assets.php#L60](https://github.com/PopupMaker/Popup-Maker/blob/master/classes/Site/Assets.php#L60).
 * Hope that helps. If your issue is resolved please take a moment to [rate and review the plugin](https://wordpress.org/support/plugin/popup-maker/reviews/?rate=5#rate-response)
   or support.
 * If you still need help please message us directly at [https://wppopupmaker.com/support/](https://wppopupmaker.com/support/).
 *  Plugin Author [Daniel Iser](https://wordpress.org/support/users/danieliser/)
 * (@danieliser)
 * [5 years, 8 months ago](https://wordpress.org/support/topic/not-using-https-to-load-script/#post-13386265)
 * It is also curious that your site loads our CSS from a CDN, but not the JS file.

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘Not using https to load script’ is closed to new replies.

 * ![](https://ps.w.org/popup-maker/assets/icon-256x256.gif?rev=3097653)
 * [Popup Maker - Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder](https://wordpress.org/plugins/popup-maker/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/popup-maker/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/popup-maker/)
 * [Active Topics](https://wordpress.org/support/plugin/popup-maker/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/popup-maker/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/popup-maker/reviews/)

 * 2 replies
 * 2 participants
 * Last reply from: [Daniel Iser](https://wordpress.org/support/users/danieliser/)
 * Last activity: [5 years, 8 months ago](https://wordpress.org/support/topic/not-using-https-to-load-script/#post-13386265)
 * Status: resolved