[wp-trac] [WordPress Trac] #57809: Application password success_url should allow http when host is localhost or localhost:port

WordPress Trac noreply at wordpress.org
Wed Mar 22 02:19:31 UTC 2023


#57809: Application password success_url should allow http when host is localhost
or localhost:port
-------------------------------------------------+-------------------------
 Reporter:  aquarius                             |       Owner:  (none)
     Type:  enhancement                          |      Status:  new
 Priority:  normal                               |   Milestone:  Awaiting
                                                 |  Review
Component:  Application Passwords                |     Version:
 Severity:  normal                               |  Resolution:
 Keywords:  dev-feedback has-patch needs-unit-   |     Focuses:
  tests                                          |
-------------------------------------------------+-------------------------

Comment (by peterwilsoncc):

 @aquarius Thanks for the patch and linking the the MDN docs on secure
 contexts.

 Either patches or GitHub PRs are equally easy. Most committers use GitHub
 these days as the tests run on them, if that influences your preference.

 I'll chat to some members of the WP Security team about treating
 http://localhost, etc as a secure context in all environments rather than
 just development environments.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/57809#comment:9>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list