[wp-trac] [WordPress Trac] #11009: screenshots of plugins from wordpress.org load over http instead of https when FORCE_SSL_ADMIN is enabled

[WordPress Trac]

#11009: screenshots of plugins from wordpress.org load over http instead of https
when FORCE_SSL_ADMIN is enabled
----------------------------+-----------------------------------------------
 Reporter:  brantgurga      |        Type:  feature request
   Status:  new             |    Priority:  normal         
Milestone:  Future Release  |   Component:  Upgrade/Install
  Version:                  |    Severity:  normal         
 Keywords:                  |  
----------------------------+-----------------------------------------------

Comment(by brantgurga):

 Other browsers can warn about this situation as well and it is a bug not a
 feature request. The reason is that when a page is loaded over https,
 there is a trust associated with it being from where it claims to be from.
 As soon as you load non-https content into the page, that non-https
 content can potentially handle all the interaction and appearance of the
 page.

 That said, it appears that a change, either in Wordpress itself or the
 Wordpress site has worked around/fixed this issue by displaying the alt
 text instead of the screenshots in this scenario.

 This is as of Wordpress 2.9.1 if it is a change in the Wordpress code
 itself for reference.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/11009#comment:3>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software