app transport security is blocking access to links that are not https schema

[ebalassanian]

I don't know if there is a good fix for this. I tried adding in some code for google image search to drop links that are not https, but the results were poor at best. Thoughts?

[dzenbot]

Is this documented somewhere, in Google's API?

[ebalassanian]

I didn’t see anything. The thumbs that google returns are all hosted by gstatic and HTTPS secured. But the soureURLs are usually not.

On May 9, 2016, at 6:30 PM, Ignacio Romero Zurbuchen notifications@github.com wrote:

Is this documented somewhere, in Google's API?

—
You are receiving this because you authored the thread.
Reply to this email directly or view it on GitHub #121 (comment)

[dzenbot]

Not sure how to bypass this TBH. Maybe with NSURLProtocol proxying?

[ebalassanian]

Sadly, online seach is quickly becoming too complex of a feature for my app :)

On May 9, 2016, at 6:39 PM, Ignacio Romero Zurbuchen notifications@github.com wrote:

Not sure how to bypass this TBH. Maybe with NSURLProtocol proxying?

—
You are receiving this because you authored the thread.
Reply to this email directly or view it on GitHub #121 (comment)

[dzenbot]

Google's API is unfortunately very wrong and unusable. Did you try Bing's instead?

[ebalassanian]

I haven’t. But I’ll work on that next. If I get it working, I’ll submit a PR. i have a feeling Bing will have the same issue though. They are crawling websites that are not https secured so they will likely serve up images that app security will not accept.

On May 9, 2016, at 7:41 PM, Ignacio Romero Zurbuchen notifications@github.com wrote:

Google's API is unfortunately very wrong and unusable. Did you try Bing's instead?

—
You are receiving this because you authored the thread.
Reply to this email directly or view it on GitHub #121 (comment)