Hacker News new | ask | show | jobs
by busterarm 3573 days ago
But if your code returns a URL, please don't do this. You should allow PRURLs (protocol-relative URLs). As in "//url".

Especially you, Hubspot. I should be able to set a protocol-relative thank you page URL on your forms. If my user reaches your embedded form on my page as http, you should give them http. If they do it on https, it should give them https.

Yes, I have an axe to grind.