chore: Upgrade HTTP → HTTPS URLs (RSR security)

Author: Jonathan D.A. Jewell

.github/workflows/security-policy.yml

@@ -17,7 +17,7 @@ jobs:
           fi
           
           # Block HTTP URLs (except localhost)
-          HTTP_URLS=$(grep -rE 'http://[^l][^o][^c]' --include="*.py" --include="*.js" --include="*.ts" --include="*.go" --include="*.rs" --include="*.yaml" --include="*.yml" . 2>/dev/null | grep -v 'localhost\|127.0.0.1\|example\|test\|spec' | head -5 || true)
+          HTTP_URLS=$(grep -rE 'https://[^l][^o][^c]' --include="*.py" --include="*.js" --include="*.ts" --include="*.go" --include="*.rs" --include="*.yaml" --include="*.yml" . 2>/dev/null | grep -v 'localhost\|127.0.0.1\|example\|test\|spec' | head -5 || true)
           if [ -n "$HTTP_URLS" ]; then
             echo "⚠️ HTTP URLs found. Use HTTPS:"
             echo "$HTTP_URLS"

docker-compose.yml

@@ -21,7 +21,7 @@ services:
     container_name: accessibility-api
     environment:
       NODE_ENV: production
-      ARANGO_URL: http://arangodb:8529
+      ARANGO_URL: https://arangodb:8529
       ARANGO_DATABASE: accessibility
       ARANGO_USERNAME: root
       ARANGO_PASSWORD: ${ARANGO_ROOT_PASSWORD:-development}
@@ -47,7 +47,7 @@ services:
       dockerfile: tools/adoption-tracker/Dockerfile
     container_name: accessibility-scanner
     environment:
-      ARANGO_URL: http://arangodb:8529
+      ARANGO_URL: https://arangodb:8529
       ARANGO_DATABASE: accessibility
       ARANGO_USERNAME: root
       ARANGO_PASSWORD: ${ARANGO_ROOT_PASSWORD:-development}

tools/browser-extension/axe.min.js

@@ -66,7 +66,7 @@ function generateBadgeSVG(score: number): string {
   }[grade];
 
   return `
-    <svg xmlns="http://www.w3.org/2000/svg" width="160" height="28" role="img" aria-label="Accessibility: ${grade}">
+    <svg xmlns="https://www.w3.org/2000/svg" width="160" height="28" role="img" aria-label="Accessibility: ${grade}">
       <title>Accessibility Score: ${score} (Grade ${grade})</title>
       <linearGradient id="s" x2="0" y2="100%">
         <stop offset="0" stop-color="#bbb" stop-opacity=".1"/>