[wp-trac] [WordPress Trac] #29708: WordPress 4.0 decides whether the URL is http or httpS based on site environent

[WordPress Trac]

#29708: WordPress 4.0 decides whether the URL is http or httpS based on site
environent
--------------------------------------+--------------------------
 Reporter:  cooperman                 |       Owner:  johnbillion
     Type:  defect (bug)              |      Status:  reviewing
 Priority:  normal                    |   Milestone:  4.0.1
Component:  Security                  |     Version:  4.0
 Severity:  major                     |  Resolution:
 Keywords:  2nd-opinion dev-feedback  |     Focuses:
--------------------------------------+--------------------------

Comment (by johnbillion):

 The problem with the idea proposed on #6778 is that the redirect issued by
 WordPress in this case is perfectly valid (from `http://example.com` to
 `https://example.com`). The problem arises when CloudFlare receives the
 redirect, and then changes the scheme to `http` before acting upon it.
 This is what causes the infinite redirect.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/29708#comment:13>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform