spaze/vat-calculator

Fetch WSDL over HTTPS

spaze opened this issue · 0 comments

spaze commented

The VIES WSDL is loaded over http://:

const VAT_SERVICE_URL = 'http://ec.europa.eu/taxation_customs/vies/checkVatService.wsdl';

It should be loaded over HTTPS, because they redirect to HTTPS anyway:

$ curl -i http://ec.europa.eu/taxation_customs/vies/checkVatService.wsdl
HTTP/1.1 307 Temporary Redirect
Location: https://ec.europa.eu/taxation_customs/vies/checkVatService.wsdl
Cache-Control: no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Proxy-Connection: close
Connection: close
Content-Length: 738

<HTML><HEAD>
<TITLE>Redirect</TITLE>
[...]

Upstream bug: driesvints#96