Merge pull request #1660 from PrivateBin/httpssecure

Make sure legacy check returns true only on HTTPS (not like ftp or whatever)

js/legacy.js

@@ -106,8 +106,8 @@
                 return window.isSecureContext;
             }
 
-            // HTTP is obviously insecure
-            if (window.location.protocol !== 'http:') {
+            // HTTPS is considered secure
+            if (window.location.protocol === 'https:') {
                 return true;
             }