I have a simple express.js / React / vite app that is hosted on a digital ocean droplet.
Since it is mostly for studying/entertainment I didn’t bother to buy a domain name and configure https. I was accessing the website directly through ip address (ex: 156.125.8.11:9999)
Without any changes in code all internal requests are being upgraded to https now. I still see http url in index.html, but the network request is using https, that obviously fails because no SSL is configured.
This is the html file, inspected using devtools:
<html lang="en"><head>
<meta charset="UTF-8">
<link rel="icon" type="image/svg+xml" href="/vite.svg">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>Vite + React + TS</title>
<script type="module" crossorigin="" src="https://156.125.8.11:9999/assets/index-DDRGdzOp.js"></script>
<link rel="stylesheet" crossorigin="" href="http://156.125.8.11:9999/assets/index-n_ryQ3BS.css">
</head>
<body>
<div id="root"></div>
</body>
</html>
Yet, <script>
and <link>
are making https requests.
I have no special headers configured, vite config is fairly simple
export default defineConfig({
plugins: [react()],
})
Had all the browsers received some security update recenlty?
How to get things working on http as it was before?
2