Whether requests to baseUrl (or staticBaseUrl) would travel unencrypted, as one
sentence for a warning (without a warning: prefix), or undefined when they would
not: for https:, for a URL that does not parse, and for a loopback host
(localhost, 127.0.0.0/8, ::1), where nothing leaves the machine.
The sentence names the host (url.host: host and port, never the userinfo) and what
secret travels with the requests: the base URL's credentials when it carries
userinfo, and every phrase in secrets (noun phrases such as "the API key"; the DWD
API takes none, so the CLI passes none). It never contains a password. The CLI
logs it as a WARN record of dwd.http on stderr (once per run, before the first
request).
Whether requests to
baseUrl(orstaticBaseUrl) would travel unencrypted, as one sentence for a warning (without awarning:prefix), orundefinedwhen they would not: forhttps:, for a URL that does not parse, and for a loopback host (localhost, 127.0.0.0/8,::1), where nothing leaves the machine.The sentence names the host (
url.host: host and port, never the userinfo) and what secret travels with the requests: the base URL's credentials when it carries userinfo, and every phrase insecrets(noun phrases such as "the API key"; the DWD API takes none, so the CLI passes none). It never contains a password. The CLI logs it as aWARNrecord ofdwd.httpon stderr (once per run, before the first request).