Change HTTP links to HTTPS

README.md

@@ -18,7 +18,7 @@ The programming courses offered on openHPI include practical programming exercis
 3. CodeOcean includes unit tests to provide feedback for learners and score their code. A unit test is defined as a program that either runs the learner’s code in a pre-defined way and compares the provided result with an expectation or the unit test parses the student’s source code and matches it against an exercise-defined string. While the code of the unit tests are hidden, learners can run the unit tests at any time and get instant feedback whether they passed or failed. If the unit tests fail the result is shown together with an error message defined by the MOOC instructors. On the one hand, this feedback helps people to help themselves and provides learners with a hint of their mistake. On the other hand, the automated scoring using unit tests is required to indicate progress for the learners. In the context of a MOOC with thousands of active learners, a manual review by the instructors is not feasible and peer-review of source code has not been implemented in CodeOcean so far.
 4. In CodeOcean, learners can ask questions about their program directly within the platform and in context of their current program. Usually, MOOC platforms provide a forum to discuss questions. While this concept also works great for source code in general outside of a MOOC (cf. [StackOverflow](https://stackoverflow.com)), it is an additional barrier for novices to summarize their problem externally. To understand the problem, contextual information is generally of help for others to provide the current solution. When using a dedicated forum, learners are required to provide as much information as necessary to reproduce the issue which beginners might find difficult to identify. As a result, they might copy too few or too much information. In addition, early iterations of the Java courses showed that learners did not format their source code appropriate in forum posts (but as plain text), making it difficult to read. With _Request for Comments_, CodeOcean provides a built-in feature to ask a question in the context of an exercise, thus lowering the barriers to get help. CodeOcean presents the learner’s source code and error message together with the question to fellow students and allows them to add a comment specifically to one line of code. Hence, the previously described issue is solved with a dedicated forum.
 
-CodeOcean is mainly used in the context of MOOCs (such as those offered on openHPI and mooc.house) and has been used by more than 60,000 users as of June 2020. CodeOcean is a stand-alone tool implementing the [Learning Tools Interoperability (LTI)](http://www.imsglobal.org/activity/learning-tools-interoperability) standard to be used in various learning scenarios. By offering an LTI interface, it is accessible from MOOC providers as well as other providers, such as the HPI Schul-Cloud. CodeOcean itself cannot be used directly by learners or other users than the MOOCs instructors or administrators.
+CodeOcean is mainly used in the context of MOOCs (such as those offered on openHPI and mooc.house) and has been used by more than 60,000 users as of June 2020. CodeOcean is a stand-alone tool implementing the [Learning Tools Interoperability (LTI)](https://www.imsglobal.org/activity/learning-tools-interoperability) standard to be used in various learning scenarios. By offering an LTI interface, it is accessible from MOOC providers as well as other providers, such as the HPI Schul-Cloud. CodeOcean itself cannot be used directly by learners or other users than the MOOCs instructors or administrators.
 
 ## Development Setup
 
@@ -48,7 +48,7 @@ In order to execute code submissions using the [DockerContainerPool](https://git
 
 ## Production Setup
 
-- We recommend using [Capistrano](http://capistranorb.com/) for deployment.
+- We recommend using [Capistrano](https://capistranorb.com/) for deployment.
 - Once deployed, CodeOcean assumes to run exclusively under a (sub)domain. If you want to use it under a custom subpath, you can specify the desired path using an environment variable: `RAILS_RELATIVE_URL_ROOT=/codeocean`. Please ensure to rebuild all assets and restart the server to apply the new path.
 
 ## Monitoring

app/assets/javascripts/pagedown/markdown.editor.js.erb

@@ -29,12 +29,12 @@
     // entering links.
     var linkDialogTitle = "<%= I18n.t('components.markdown_editor.insert_link.dialog_title', default: 'Insert link') %>";
     var linkInputLabel = "<%= I18n.t('components.markdown_editor.insert_link.input_label', default: 'Link URL') %>";
-    var linkInputPlaceholder = "http://example.com/ \"optional title\"";
+    var linkInputPlaceholder = "https://example.com/ \"optional title\"";
     var linkInputHelp = "<%= I18n.t('components.markdown_editor.insert_link.input_help', default: 'Enter URL to point link to and optional title to display when mouse is placed over the link') %>";
 
     var imageDialogTitle = "<%= I18n.t('components.markdown_editor.insert_image.dialog_title', default: 'Insert image') %>";
     var imageInputLabel = "<%= I18n.t('components.markdown_editor.insert_image.input_label', default: 'Image URL') %>";
-    var imageInputPlaceholder = "http://example.com/images/diagram.jpg \"optional title\"";
+    var imageInputPlaceholder = "https://example.com/images/diagram.jpg \"optional title\"";
     var imageInputHelp = "<%= I18n.t('components.markdown_editor.insert_link.input_help', default: 'Enter URL where image is located and optional title to display when mouse is placed over the image') %>";
 
     var defaultHelpHoverTitle = "Markdown Editing Help";
@@ -193,7 +193,7 @@
         var regexText;
         var replacementText;
 
-        // chrome bug ... documented at: http://meta.stackoverflow.com/questions/63307/blockquote-glitch-in-editor-in-chrome-6-and-7/65985#65985
+        // chrome bug ... documented at: https://meta.stackoverflow.com/questions/63307/blockquote-glitch-in-editor-in-chrome-6-and-7/65985#65985
         if (navigator.userAgent.match(/Chrome/)) {
             "X".match(/()./);
         }
@@ -1793,7 +1793,7 @@
         //
         // Since this is essentially a backwards-moving regex, it's susceptible to
         // catastrophic backtracking and can cause the browser to hang;
-        // see e.g. http://meta.stackoverflow.com/questions/9807.
+        // see e.g. https://meta.stackoverflow.com/questions/9807.
         //
         // Hence we replaced this by a simple state machine that just goes through the
         // lines and checks for a), b), and c).

app/assets/javascripts/pagedown/pagedown.js.erb

@@ -24,7 +24,7 @@ createPagedownEditor = function( selector, context ) {
         Markdown.Extra.init(converter);
         const help = {
             handler() {
-                window.open('http://daringfireball.net/projects/markdown/syntax');
+                window.open('https://daringfireball.net/projects/markdown/syntax');
                 return false;
             },
             title: "<%= I18n.t('components.markdown_editor.help', default: 'Markdown Editing Help') %>"

app/assets/stylesheets/comments.css.scss

@@ -1,6 +1,6 @@
 // Place all the styles related to the Comments controller here.
 // They will automatically be included in application.css.
-// You can use Sass (SCSS) here: http://sass-lang.com/
+// You can use Sass (SCSS) here: https://sass-lang.com/
 
 .ace_gutter-cell.code-ocean_comment {
     background-image: url("data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAABmJLR0QA/wD/AP+gvaeTAAAACXBIWXMAAAsTAAALEwEAmpwYAAAAB3RJTUUH3wIUDTMn077U+gAAANhJREFUOMvV0jFOQkEURuEPfCFKaChwASQWhsIOaxYgW7Ci0c4VuBBM6GmsWIC2JsbCykJiRSD0GMVHMy+ZTPSBlfHvZu7NyZ1zh79O5Zu7Bi7RRz30TDHC7TbACB1UkSe1Kt5xg2FxuRc1jHFcMm0e+k/xgceCCmc4wtcOz17jCs0YMMDnL9ytcBgDVj8ILZO/jgHXiY9t2cdbLHGBFk4KcklqYcXLdAt3wXQ3kVlBhgM84AKvRTFL6O0gM8MTZuH8ggnmZaP18Ix7nO8qI0t+Wi/4yP2bbAA4rSby6Nz4AwAAAABJRU5ErkJggg==");

app/assets/stylesheets/file_templates.css.scss

@@ -1,3 +1,3 @@
 // Place all the styles related to the FileTemplates controller here.
 // They will automatically be included in application.css.
-// You can use Sass (SCSS) here: http://sass-lang.com/
+// You can use Sass (SCSS) here: https://sass-lang.com/

config/schedule.rb

@@ -3,7 +3,7 @@
 # Use this file to easily define all of your cron jobs.
 #
 # It's helpful, but not entirely necessary to understand cron before proceeding.
-# http://en.wikipedia.org/wiki/Cron
+# https://en.wikipedia.org/wiki/Cron
 
 # Example:
 #
@@ -19,7 +19,7 @@
 #   runner "AnotherModel.prune_old_records"
 # end
 
-# Learn more: http://github.com/javan/whenever
+# Learn more: https://github.com/javan/whenever
 
 set :output, "#{Whenever.path}/log/whenever/whenever_$(date +%Y%m%d%H%M%S).log"
 set :environment, ENV.fetch('RAILS_ENV', nil) if ENV['RAILS_ENV']

db/seeds/audio_video/index.html

@@ -1,7 +1,7 @@
 <!DOCTYPE html>
 <html>
   <head>
-    <script src="http://code.jquery.com/jquery-2.1.1.min.js"></script>
+    <script src="https://code.jquery.com/jquery-2.1.1.min.js"></script>
     <script src="index.js"></script>
   </head>
   <body>

db/seeds/geolocation/index.html

@@ -1,7 +1,7 @@
 <!DOCTYPE html>
 <html>
   <head>
-    <script src="http://code.jquery.com/jquery-2.1.1.min.js"></script>
+    <script src="https://code.jquery.com/jquery-2.1.1.min.js"></script>
     <script src="index.js"></script>
   </head>
   <body>

docs/LOCAL_SETUP.md

@@ -93,7 +93,7 @@ sudo apt install apt-transport-https ca-certificates curl gnupg-agent software-p
 
 ```bash
 curl -sSL https://www.postgresql.org/media/keys/ACCC4CF8.asc | sudo apt-key add -
-echo "deb http://apt.postgresql.org/pub/repos/apt/ $(lsb_release -cs)-pgdg main" | sudo tee /etc/apt/sources.list.d/pgdg.list
+echo "deb https://apt.postgresql.org/pub/repos/apt/ $(lsb_release -cs)-pgdg main" | sudo tee /etc/apt/sources.list.d/pgdg.list
 sudo apt update && sudo apt install postgresql-client postgresql
 ```
 

docs/provision_server.sh

@@ -18,7 +18,7 @@ sudo adduser codeocean
 
 # PostgreSQL
 wget --quiet -O - https://www.postgresql.org/media/keys/ACCC4CF8.asc | sudo apt-key add -
-sudo add-apt-repository "deb http://apt.postgresql.org/pub/repos/apt/ $(lsb_release -sc)-pgdg main"
+sudo add-apt-repository "deb https://apt.postgresql.org/pub/repos/apt/ $(lsb_release -sc)-pgdg main"
 
 # drop postgres access control
 # tee /etc/postgresql/$postgres_version/main/pg_hba.conf <<EOF
@@ -35,7 +35,7 @@ echo "deb https://dl.yarnpkg.com/debian/ stable main" | sudo tee /etc/apt/source
 curl -sL https://deb.nodesource.com/setup_$node_version.x | sudo -E bash -
 
 # nginx
-echo "deb http://nginx.org/packages/ubuntu `lsb_release -cs` nginx" | sudo tee /etc/apt/sources.list.d/nginx.list
+echo "deb https://nginx.org/packages/ubuntu `lsb_release -cs` nginx" | sudo tee /etc/apt/sources.list.d/nginx.list
 curl -fsSL https://nginx.org/keys/nginx_signing.key | sudo apt-key add -
 
 # Install packages

provision/provision.docker.root.sh

@@ -25,7 +25,7 @@ echo "${USER}:${USER}" | chpasswd
 cd /home/${USER}
 
 # PostgreSQL
-sh -c 'echo "deb http://apt.postgresql.org/pub/repos/apt $(lsb_release -cs)-pgdg main" > /etc/apt/sources.list.d/pgdg.list'
+sh -c 'echo "deb https://apt.postgresql.org/pub/repos/apt $(lsb_release -cs)-pgdg main" > /etc/apt/sources.list.d/pgdg.list'
 wget --quiet -O - https://www.postgresql.org/media/keys/ACCC4CF8.asc | apt-key add -
 apt -qq update && apt -qq install -y postgresql-client postgresql
 

provision/provision.vagrant.sh

@@ -23,7 +23,7 @@ sudo apt -qq -y upgrade
 
 # PostgreSQL
 curl -sSL https://www.postgresql.org/media/keys/ACCC4CF8.asc | sudo apt-key add -
-echo "deb http://apt.postgresql.org/pub/repos/apt/ $(lsb_release -cs)-pgdg main" | sudo tee /etc/apt/sources.list.d/pgdg.list
+echo "deb https://apt.postgresql.org/pub/repos/apt/ $(lsb_release -cs)-pgdg main" | sudo tee /etc/apt/sources.list.d/pgdg.list
 sudo apt -qq update && sudo apt -qq install -y postgresql-client-$postgres_version postgresql-$postgres_version
 
 sudo sed -i "/# TYPE/q" /etc/postgresql/$postgres_version/main/pg_hba.conf

public/robots.txt

@@ -1,4 +1,4 @@
-# See http://www.robotstxt.org/robotstxt.html for documentation on how to use the robots.txt file
+# See https://www.robotstxt.org/robotstxt.html for documentation on how to use the robots.txt file
 #
 # To ban all spiders from the entire site uncomment the next two lines:
 # User-agent: *

spec/concerns/lti_spec.rb

@@ -62,7 +62,7 @@ describe Lti do
 
   describe '#return_to_consumer' do
     context 'with a return URL' do
-      let(:consumer_return_url) { 'http://example.org' }
+      let(:consumer_return_url) { 'https://example.org' }
 
       before { allow(controller).to receive(:params).and_return(launch_presentation_return_url: consumer_return_url) }
 

spec/controllers/codeharbor_links_controller_spec.rb

@@ -6,7 +6,7 @@ describe CodeharborLinksController do
   let(:user) { create(:teacher) }
 
   let(:codeocean_config) { instance_double(CodeOcean::Config) }
-  let(:codeharbor_config) { {codeharbor: {enabled: true, url: 'http://test.url'}} }
+  let(:codeharbor_config) { {codeharbor: {enabled: true, url: 'https://test.url'}} }
 
   before do
     allow(CodeOcean::Config).to receive(:new).with(:code_ocean).and_return(codeocean_config)
@@ -32,7 +32,7 @@ describe CodeharborLinksController do
 
   describe 'POST #create' do
     let(:post_request) { post :create, params: {codeharbor_link: params} }
-    let(:params) { {push_url: 'http://foo.bar/push', check_uuid_url: 'http://foo.bar/check', api_key: 'api_key'} }
+    let(:params) { {push_url: 'https://foo.bar/push', check_uuid_url: 'https://foo.bar/check', api_key: 'api_key'} }
 
     it 'creates a codeharbor_link' do
       expect { post_request }.to change(CodeharborLink, :count).by(1)
@@ -59,14 +59,14 @@ describe CodeharborLinksController do
   describe 'PUT #update' do
     let(:codeharbor_link) { create(:codeharbor_link, user: user) }
     let(:put_request) { patch :update, params: {id: codeharbor_link.id, codeharbor_link: params} }
-    let(:params) { {push_url: 'http://foo.bar/push', check_uuid_url: 'http://foo.bar/check', api_key: 'api_key'} }
+    let(:params) { {push_url: 'https://foo.bar/push', check_uuid_url: 'https://foo.bar/check', api_key: 'api_key'} }
 
     it 'updates push_url' do
-      expect { put_request }.to change { codeharbor_link.reload.push_url }.to('http://foo.bar/push')
+      expect { put_request }.to change { codeharbor_link.reload.push_url }.to('https://foo.bar/push')
     end
 
     it 'updates check_uuid_url' do
-      expect { put_request }.to change { codeharbor_link.reload.check_uuid_url }.to('http://foo.bar/check')
+      expect { put_request }.to change { codeharbor_link.reload.check_uuid_url }.to('https://foo.bar/check')
     end
 
     it 'updates api_key' do

spec/factories/codeharbor_link.rb

@@ -3,8 +3,8 @@
 FactoryBot.define do
   factory :codeharbor_link do
     user { build(:teacher) }
-    push_url { 'http://push.url' }
-    check_uuid_url { 'http://check-uuid.url' }
+    push_url { 'https://push.url' }
+    check_uuid_url { 'https://check-uuid.url' }
     sequence(:api_key) {|n| "api_key#{n}" }
   end
 end

spec/factories/lti_parameter.rb

@@ -3,8 +3,8 @@
 FactoryBot.define do
   lti_params = {
     lis_result_sourcedid: 'c2db0c7c-4411-4b27-a52b-ddfc3dc32065',
-      lis_outcome_service_url: 'http://172.16.54.235:3000/courses/0132156a-9afb-434d-83cc-704780104105/sections/21c6c6f4-1fb6-43b4-af3c-04fdc098879e/items/999b1fe6-d4b6-47b7-a577-ea2b4b1041ec/tool_grading',
-      launch_presentation_return_url: 'http://172.16.54.235:3000/courses/0132156a-9afb-434d-83cc-704780104105/sections/21c6c6f4-1fb6-43b4-af3c-04fdc098879e/items/999b1fe6-d4b6-47b7-a577-ea2b4b1041ec/tool_return',
+      lis_outcome_service_url: 'https://172.16.54.235:3000/courses/0132156a-9afb-434d-83cc-704780104105/sections/21c6c6f4-1fb6-43b4-af3c-04fdc098879e/items/999b1fe6-d4b6-47b7-a577-ea2b4b1041ec/tool_grading',
+      launch_presentation_return_url: 'https://172.16.54.235:3000/courses/0132156a-9afb-434d-83cc-704780104105/sections/21c6c6f4-1fb6-43b4-af3c-04fdc098879e/items/999b1fe6-d4b6-47b7-a577-ea2b4b1041ec/tool_return',
   }.freeze
 
   factory :lti_parameter do

spec/lib/runner/strategy/docker_container_pool_spec.rb

@@ -7,7 +7,7 @@ describe Runner::Strategy::DockerContainerPool do
   let(:runner_id) { attributes_for(:runner)[:runner_id] }
   let(:execution_environment) { create :ruby }
   let(:container_pool) { described_class.new(runner_id, execution_environment) }
-  let(:docker_container_pool_url) { 'http://localhost:1234' }
+  let(:docker_container_pool_url) { 'https://localhost:1234' }
   let(:config) { {url: docker_container_pool_url, unused_runner_expiration_time: 180} }
   let(:container) { instance_double(Docker::Container) }
 

spec/spec_helper.rb

@@ -15,7 +15,7 @@
 # The `.rspec` file also contains a few flags that are not defaults but that
 # users commonly want.
 #
-# See http://rubydoc.info/gems/rspec-core/RSpec/Core/Configuration
+# See https://rubydoc.info/gems/rspec-core/RSpec/Core/Configuration
 
 unless RUBY_PLATFORM == 'java'
   require 'simplecov'
@@ -65,7 +65,7 @@ RSpec.configure do |config|
   config.expect_with :rspec do |expectations|
     # Enable only the newer, non-monkey-patching expect syntax.
     # For more details, see:
-    #   - http://myronmars.to/n/dev-blog/2012/06/rspecs-new-expectation-syntax
+    #   - https://rspec.info/blog/2012/06/rspecs-new-expectation-syntax/
     expectations.syntax = :expect
   end
 
@@ -73,8 +73,6 @@ RSpec.configure do |config|
   # library (such as bogus or mocha) by changing the `mock_with` option here.
   config.mock_with :rspec do |mocks|
     # Enable only the newer, non-monkey-patching expect syntax.
-    # For more details, see:
-    #   - http://teaisaweso.me/blog/2013/05/27/rspecs-new-message-expectation-syntax/
     mocks.syntax = :expect
 
     # Prevents you from mocking or stubbing a method that does not exist on