[wp-trac] [WordPress Trac] #57809: Application password success_url should allow http when host is localhost or localhost:port

WordPress Trac noreply at wordpress.org
Tue Mar 21 12:12:33 UTC 2023


#57809: Application password success_url should allow http when host is localhost
or localhost:port
-------------------------------------------------+-------------------------
 Reporter:  aquarius                             |       Owner:  (none)
     Type:  enhancement                          |      Status:  new
 Priority:  normal                               |   Milestone:  Awaiting
                                                 |  Review
Component:  Application Passwords                |     Version:
 Severity:  normal                               |  Resolution:
 Keywords:  dev-feedback has-patch needs-unit-   |     Focuses:
  tests                                          |
-------------------------------------------------+-------------------------

Comment (by aquarius):

 Replying to [comment:7 cadic]:
 > Looks like a duplicate of https://core.trac.wordpress.org/ticket/52617

 Not quite, I think. That's about allowing all URLs when environment type
 is local. What I propose here is that WordPress works a little more like
 browser secure contexts: that an https URL is required as success_url but
 that http://localhost:(port) __counts as__ an https URL, which makes
 testing plugins and authorized apps easier.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/57809#comment:8>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list