MathJax, http, and https

MathJax, http, and https

[Dan Drake]

[-- Attachment #1.1: Type: text/plain, Size: 1172 bytes --]

Hi,

When I convert to HTML (specifically, reveal.js) using --mathjax, it looks 
like Pandoc always uses a link with "http://". This causes problems when 
you serve the resulting HTML over https; modern browsers refuse to follow 
the http link to avoid man-in-the-middle attacks. The MathJax documentation 
[1] recommends using a "protocol agnostic" link that just starts with "//". 
It looks like Pandoc should do this to avoid problems when serving HTML 
securely.

Thanks!

Dan

[1]: 
http://docs.mathjax.org/en/latest/misc/faq.html#how-do-i-access-the-mathjax-cdn-using-a-https-secure-connection

-- 
You received this message because you are subscribed to the Google Groups "pandoc-discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to pandoc-discuss+unsubscribe-/JYPxA39Uh5TLH3MbocFF+G/Ez6ZCGd0@public.gmane.org
To post to this group, send email to pandoc-discuss-/JYPxA39Uh5TLH3MbocFF+G/Ez6ZCGd0@public.gmane.org
To view this discussion on the web visit https://groups.google.com/d/msgid/pandoc-discuss/3a8d1402-8d1f-434f-835e-4743d384aef8%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[-- Attachment #1.2: Type: text/html, Size: 1605 bytes --]

Re: MathJax, http, and https

[John MacFarlane]

+++ Dan Drake [Nov 21 14 11:21 ]:
>Hi,
>
>When I convert to HTML (specifically, reveal.js) using --mathjax, it looks
>like Pandoc always uses a link with "http://". This causes problems when
>you serve the resulting HTML over https; modern browsers refuse to follow
>the http link to avoid man-in-the-middle attacks. The MathJax documentation
>[1] recommends using a "protocol agnostic" link that just starts with "//".
>It looks like Pandoc should do this to avoid problems when serving HTML
>securely.

You can specify whatever URL you like using --mathjax=URL.
The reason we don't use '//' in the default template is that it
messes up the ability to use mathjax in files you're previewing
locally (since then it resolves to file://).

John