[wp-trac] [WordPress Trac] #62921: Multi-site subdomain sub-site home and siteurl scheme breaks FSE themes custom fonts

[WordPress Trac]

#62921: Multi-site subdomain sub-site home and siteurl scheme breaks FSE themes
custom fonts
--------------------------------+-----------------------------
 Reporter:  RavanH              |      Owner:  (none)
     Type:  feature request     |     Status:  new
 Priority:  normal              |  Milestone:  Awaiting Review
Component:  Networks and Sites  |    Version:  6.7.1
 Severity:  normal              |   Keywords:
  Focuses:  multisite           |
--------------------------------+-----------------------------
 On a Multi-site in subdomaine mode, where the main site home and siterurl
 are both on https, newly created sub-sites will have http instead of
 https. Looking at
 [install_blog()](https://core.trac.wordpress.org/browser/tags/4.9.4/src
 /wp-includes/ms-functions.php#L1434) This appears to be by design. Only
 when `! is_subdomain_install()` and the main site is on https, the home
 ans siteurl are forced to https.

 I see the logic in this. Not everyone might have a wildcard SSL ready.

 But it does create a problem:

 If there is a wildcard SSL license, and http>https redirects, HTST or
 browser preferences in place, subsites will be accessed over https.

 When such a sub-site uses (for example) the Twenty Twenty-Five theme and
 the site admin has set a custom font downloaded via the Google Fonts
 dialog in the Site Editor, the resource will be referenced over http in
 the front end page source.

 These are blocked by the browser as insecure requests and the font will
 not be rendered on the site.

 Only manually setting each home and siteurl for each subsite via the
 Network > Sites admin (or directly in the DB) solves the issue.

 An annoying little issue that might be solved by a network option like
 "Site uses HTTPS" under Network > Settings > New Site Settings.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/62921>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform