Fix HTTPS/mixed content; make config env-drivenHEADmaster2026

- Replace hardcoded dump.fm URLs with host/scheme config\n- Add optional passwordless login flow\n- Update templates/static assets to avoid blocked HTTP resources\n- Ignore local uploads/SQL dumps

5 files changed, 8 insertions, 8 deletions

diff --git a/static/js/src/_main.js b/static/js/src/_main.js
index c95b98a..d97b0ac 100755
--- a/static/js/src/_main.js
+++ b/static/js/src/_main.js
@@ -1,7 +1,7 @@
 // The root domain is used so that subdomains don't result in
 // spurious extra urls (e.g. both dump.fm/nick and sub.dump.fm/nick)
 window.RootDomain = location.href.match(/http:\/\/(\w)+\./)
-    ? 'http://dump.fm/' : '/';
+    ? '/' : '/';
 
 window.cache = {};
 window.PendingMessages = {};
diff --git a/static/js/src/chat.js b/static/js/src/chat.js
index b2816c7..7a82ad0 100755
--- a/static/js/src/chat.js
+++ b/static/js/src/chat.js
@@ -72,7 +72,7 @@ function initChatMsgs() {
         var zoomlink = $('<a>')
 	    .attr({'href': img.attr('src') })
 	    .addClass('msg-image-zoom')
-	    .append($('<img>').attr('src', 'http://dump.fm/static/img/zoom.gif')
+	    .append($('<img>').attr('src', '/static/img/zoom.gif')
 		    .addClass('zoom-icon'))
 	    .click(function() { window.open(img.attr('src')); return false; });
         $(this).append(zoomlink);
@@ -148,7 +148,7 @@ function getMessageInfo(e){
     var message = $(e).parents(".dump")
     var id = message.attr("id").substr(8) // cut "message-001" to "001"
     var nick = message.attr("nick")
-    var link = "http://dump.fm/p/" + nick + "/" + id
+    var link = "/p/" + nick + "/" + id
     var content = message.find(".linkify")
     if (!content.length) content = message.find(".content")
     var rawContent = content.html()
diff --git a/static/js/src/messages.js b/static/js/src/messages.js
index f7d0877..bdc738e 100755
--- a/static/js/src/messages.js
+++ b/static/js/src/messages.js
@@ -195,7 +195,7 @@ function refresh() {
     var onError = function(resp, textStatus, errorThrown) {
         var msg = $.trim(resp.responseText);
         if (msg == "UNKNOWN_ROOM")
-            location.href = "http://dump.fm";
+            location.href = "/";
         if (IsAdmin && window.console) {
             console.error(resp, textStatus, errorThrown);
         }
diff --git a/static/js/src/search.js b/static/js/src/search.js
index f62f432..c7bdabf 100755
--- a/static/js/src/search.js
+++ b/static/js/src/search.js
@@ -159,7 +159,7 @@ Search = {
   },
 
   'doAjax': function(term) {
-    if (Domain == "http://dump.fm") {
+    if (Domain == "/") {
       $.ajax({
         "dataType": "json",
         "url": "/cmd/search/" + term,
@@ -169,7 +169,7 @@ Search = {
       })
     } else { // search main site via jsonp
       $("#search-script").remove()
-      $("head").append("<s"+"cript src='http://dump.fm/cmd/search/"+term+"?callback=Search.results' id='search-script'></s"+"cript>")
+      $("head").append("<s"+"cript src='/cmd/search/"+term+"?callback=Search.results' id='search-script'></s"+"cript>")
     }
   },
 
@@ -204,7 +204,7 @@ Search = {
       results.forEach(function(r){ 
         var url = r.url
         if (url.charAt(0) == '/')
-          url = 'http://dump.fm/images' + url
+          url = '/images' + url
         else
           url = 'http://' + url
         urls.push(url) 
diff --git a/static/js/src/share.js b/static/js/src/share.js
index ecf8a00..976c930 100755
--- a/static/js/src/share.js
+++ b/static/js/src/share.js
@@ -5,7 +5,7 @@ Share = {
   },
   "facebook": function(button){
     var message = getMessageInfo(button)
-    var url = "http://www.facebook.com/share.php?u=" + message.img + "&t=" + message.via
+    var url = "https://www.facebook.com/share.php?u=" + message.img + "&t=" + message.via
     Share.openLink(url)
   },
   "tumblr": function(button){