[wp-trac] [WordPress Trac] #50339: setup-config.php serves mixed content when behind a TLS termination proxy

WordPress Trac noreply at wordpress.org
Tue Jun 9 11:36:16 UTC 2020


#50339: setup-config.php serves mixed content when behind a TLS termination proxy
-------------------------------+------------------------------
 Reporter:  simosx             |       Owner:  (none)
     Type:  defect (bug)       |      Status:  new
 Priority:  normal             |   Milestone:  Awaiting Review
Component:  Upgrade/Install    |     Version:
 Severity:  normal             |  Resolution:
 Keywords:  reporter-feedback  |     Focuses:
-------------------------------+------------------------------
Changes (by johnbillion):

 * keywords:   => reporter-feedback


Comment:

 Thanks for the ticket and for the patch @simosx .

 Can you explain a little about the relationship between the TLS
 termination and the Upgrade Insecure Requests header please? As far as I
 know they are not connected, and your patch appears at first glance like
 it will cause ''any'' request to be upgraded in any browser that sends
 this header. It doesn't appear to be related to the scheme that the user
 intends to use for the site.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/50339#comment:2>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list