[wp-trac] [WordPress Trac] #28658: is_ssl() may fail on ssl, relying on mod_ssl.

WordPress Trac noreply at wordpress.org
Tue Jan 3 12:45:23 UTC 2017


#28658: is_ssl() may fail on ssl, relying on mod_ssl.
--------------------------+------------------------
 Reporter:  mampf         |       Owner:
     Type:  defect (bug)  |      Status:  closed
 Priority:  normal        |   Milestone:
Component:  Security      |     Version:  3.9.1
 Severity:  normal        |  Resolution:  duplicate
 Keywords:                |     Focuses:
--------------------------+------------------------
Changes (by dd32):

 * keywords:  reporter-feedback 2nd-opinion =>
 * status:  new => closed
 * resolution:   => duplicate
 * milestone:  Awaiting Review =>


Comment:

 Ultimately it's down to the server configuration to properly let the
 applications know that SSL is in use - forwarding variables which the
 application cannot detect as coming from a legitimate upstream is a
 challenge in itself, which has been greatly discussed in #31288

--
Ticket URL: <https://core.trac.wordpress.org/ticket/28658#comment:5>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list