Question

154

Hotlink resources like JavaScript files directly from GitHub

rated 0 times [ 160] [ 6] / answers: 1 / hits: 11818 / 11 Years ago, sun, december 1, 2013, 12:00:00

I asked a question about including resources from GitHub and the answer was to use the raw link:

https://raw.github.com/username/repository/branch/file.js

I am trying to include a script using:

<script

   type=text/javascript

   src=https://raw.github.com/username/repo/master/src/file.js

></script>

but I get the following error:

Refused to execute script from 'https://raw.github.com/username/repo/master/src/file.js' because its MIME type ('text/plain') is not executable, and strict MIME type checking is enabled.

Are there any alternatives to fix this error?

Usage example

I don't use this in the production but for a demo page:

project-repository-from-github

  ├─ master

  │   ├─ src

  │   │   └─ my-jQuery-plugin.js

  │   └─ README.md

  └─ gh-pages

      ├─ css

      │   └─ style.css

      └─ index.html

In the index.html page I want to have the latest build of my-jQuery-plugin.js. So, I would include the raw URL to the script.

How do I fix the error?

Answers

Only authorized users can answer the question. Please sign in first, or register a free account.

lucianom

Add To Favorites

Follow

Total Points: 601

Total Questions: 98

Total Answers: 109

Location: Kenya

Member since Fri, Dec 23, 2022

1 Year ago

lucianom questions

1 Map and sort data by date

Tue, Feb 22, 22, 00:00, 2 Years ago

1 Typescript axios typings

Wed, May 5, 21, 00:00, 3 Years ago

1 Ho can I add two values in Bootstrap range slider

Sun, Jan 24, 21, 00:00, 3 Years ago

1 Discord.js, async and await

Sat, Aug 15, 20, 00:00, 4 Years ago

1 How do I call a JS Function in another file?

Mon, Jun 22, 20, 00:00, 4 Years ago

View All

answered 11 Years ago louiseb · Accepted Answer

Yes, Github changed this in April, 2013:

We added the X-Content-Type-Options: nosniff header to our raw URL responses way back in 2011 as a first step in combating hotlinking. This has the effect of forcing the browser to treat content in accordance with the Content-Type header. That means that when we set Content-Type: text/plain for raw views of files, the browser will refuse to treat that file as JavaScript or CSS.

But thanks to http://combinatronics.com/ we can include GH scripts. The only change is from raw.github.com that becomes combinatronics.com:

<script

   type=text/javascript

   src=https://combinatronics.com/username/repo/master/src/file.js

></script>

The project is hosted on Github being open-source.

And yes, @Lix is correct. The files are not being served from Github but from combinatronics.

Another workaround I found is that instead of:

<script

   type=text/javascript

   src=https://combinatronics.com/username/repo/master/src/file.js

></script>

you can use $.getScript jQuery function:

<script>

  $.getScript(https://combinatronics.com/username/repo/master/src/file.js, function () {

    /* do something when loaded */

  });

</script>