[wp-trac] [WordPress Trac] #29708: WordPress 4.0 decides whether the URL is http or httpS based on site environent

WordPress Trac noreply at wordpress.org
Mon Sep 22 12:24:33 UTC 2014


#29708: WordPress 4.0 decides whether the URL is http or httpS based on site
environent
--------------------------------------+--------------------
 Reporter:  cooperman                 |       Owner:
     Type:  defect (bug)              |      Status:  new
 Priority:  normal                    |   Milestone:  4.0.1
Component:  Security                  |     Version:  4.0
 Severity:  major                     |  Resolution:
 Keywords:  2nd-opinion dev-feedback  |     Focuses:
--------------------------------------+--------------------

Comment (by DannyMe):

 Replying to [comment:6 johnbillion]:
 > The question is, if this is a common misconfiguration then is it worth
 reverting [28610]? Moving this to 4.0.1 for consideration.

 Thanks for considering reverting this, John. I really appreciate all the
 effort you put into this matter. One thing I would like to put into
 consideration is that it might be a good idea to make this new behavior of
 Wordpress configurable, just like FORCE_SSL_ADMIN?

 Cloudflare serves 1M+ websites. They confirmed the behavior of their
 service as I am experiencing it. I would say this is quite a common
 misconfiguration with so much websites potentially affected :)

--
Ticket URL: <https://core.trac.wordpress.org/ticket/29708#comment:7>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list