[wp-trac] [WordPress Trac] #15928: wp_get_attachment_url does not check for HTTPS

WordPress Trac noreply at wordpress.org
Sun Mar 1 06:12:34 UTC 2015


#15928: wp_get_attachment_url does not check for HTTPS
--------------------------+-----------------------------
 Reporter:  atetlaw       |       Owner:  boonebgorges
     Type:  defect (bug)  |      Status:  accepted
 Priority:  normal        |   Milestone:  Future Release
Component:  Permalinks    |     Version:  3.0.3
 Severity:  major         |  Resolution:
 Keywords:  has-patch     |     Focuses:
--------------------------+-----------------------------

Comment (by joemcgill):

 Hey Boone – after getting some time to review the original logic of this
 patch, I believe the reason I was checking to make sure the attachment's
 URL scheme matched the scheme of the `wp_upload_dir()`, rather than simply
 checking for an `http://` scheme, is because a site which has its public
 url set to an `https://` scheme would still produce `https://` attachment
 urls with this patch, even when the site front is being accessed from a
 non-SSL url. In those cases, we're not forcing attachments into `http://`
 schemes with this change.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/15928#comment:95>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list