Hacker News new | ask | show | jobs
by shakna 2461 days ago

    <script src="http://ajax.googleapis.com/ajax/libs/jquery/1.5.2/jquery.min.js"></script>
    <script src="http://cdnjs.cloudflare.com/ajax/libs/modernizr/2.8.2/modernizr.js"></script>
    <script src="https://ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js"></script>
Ignoring the two kinds of jquery, you're loading JavaScript to your non-TLS website without TLS?

And loading your analytics (quantcast) with inline scripts on a non-TLS page?

That's kinda asking for a MITM attack, isn't it?