[wp-trac] [WordPress Trac] #27565: Recent Posts Widget should include scheme in cache key

[WordPress Trac]

#27565: Recent Posts Widget should include scheme in cache key
--------------------------+-----------------------------
 Reporter:  dllh          |      Owner:
     Type:  defect (bug)  |     Status:  new
 Priority:  normal        |  Milestone:  Awaiting Review
Component:  Widgets       |    Version:
 Severity:  normal        |   Keywords:
  Focuses:                |
--------------------------+-----------------------------
 Repro:

 1. Run WP on a site with SSL enabled but optional and with an object
 cache.
 2. Enable the Recent Posts widget.
 3. Create some posts.
 4. Visit the site from the non-SSL url.
 5. Now visit the site from the SSL url.

 Expected: Items linked in the recent posts widget will use the same scheme
 as the site itself.

 Actual: Whatever was last cached is what's used. The result is that if you
 visited the site via https but someone else cached data from http, you'll
 get insecure links when your expectation is that you'll continue to browse
 the site via ssl.

 This can be fixed by using the scheme in the cache key so that we're
 always serving the right links when served from the object cache.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/27565>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform