HTTPS sensitive URIs

[kepta]

change of all http:// URIs in js/id folder to //.

(closes #2960)

[bhousel]

Looks like this has moved to:
https://blog.openstreetmap.org/2010/11/30/microsoft-imagery-details/

[bhousel]

see also discussion on #2681

For outbound links and api endpoints, we need to make sure the resource is available over both http and https. I commented in the diff the places where that's not true.

Given that iD can sometimes be loaded locally, and file:// urls can break in surprising ways, maybe we should instead add the location.protocol === 'http' ? 'http' : 'https' check to iD.detect()?

Thoughts @jfirebaugh ?

[kepta]

This // will load the hyperlink depending on the iD's current connection status
if plain then // will go to http://
if encypted then // will go to https://

So I think we wont need to do
location.protocol === 'http' ? 'http' : 'https'

[jfirebaugh]

Please don't use protocol relative URLs -- as @bhousel said they fail for file://, and https is preferred even when loading the referring page on http. Therefore:

• If the site supports https, use https unconditionally.
• If not, look for an alternative URL.
• Failing that, bug the site owner for https support.
• Failing that, stick to http.

[kepta]

@bhousel I have updated the patch.
Please have a look.

[bhousel]

Thanks this looks good!