[wp-trac] [WordPress Trac] #25484: Thumbnails on Install Themes screen breaks SSL

WordPress Trac noreply at wordpress.org
Thu Oct 3 23:02:47 UTC 2013


#25484: Thumbnails on Install Themes screen breaks SSL
----------------------------+-----------------------------
 Reporter:  johnbillion     |      Owner:
     Type:  enhancement     |     Status:  new
 Priority:  normal          |  Milestone:  Awaiting Review
Component:  Administration  |    Version:
 Severity:  normal          |   Keywords:
----------------------------+-----------------------------
 The thumbnails on the Install Themes screen are always loaded over HTTP,
 which produces a mixed content warning when using admin over SSL.

 There are two parts to this:

  1. The site that theme thumbnails are loaded from (wp-themes.com) needs a
 valid SSL certificate. Current if you try to load a theme thumbnail over
 SSL you'll get a certificate warning because the cert is for
 wordpress.org.
  2. The thumbnails need to respect the admin area scheme when they're
 loaded.

 Additionally, it's a bit odd that these thumbnails (and the theme
 previewer) come from wp-themes.com, which is not a familiar domain. Is
 there a reason it's not using wordpress.org or a subdomain thereof?

--
Ticket URL: <http://core.trac.wordpress.org/ticket/25484>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list