[wp-trac] [WordPress Trac] #31288: IS_SSL should check return true for SSL Terminated load balancing

[WordPress Trac]

#31288: IS_SSL should check return true for SSL Terminated load balancing
-----------------------------+------------------------------
 Reporter:  bretterer        |       Owner:
     Type:  defect (bug)     |      Status:  reopened
 Priority:  normal           |   Milestone:  Awaiting Review
Component:  Security         |     Version:  trunk
 Severity:  normal           |  Resolution:
 Keywords:  has-patch close  |     Focuses:
-----------------------------+------------------------------

Comment (by dd32):

 > I think the best solution that doesn't explicitly open up security
 concerns is adding a filter to the output of is_ssl so developers can
 handle the complex logic for their hosting environment in plugins

 The thing is, they already can, all they need to do is have their plugin
 set `$_SERVER['HTTPS'] = 1` as appropriate, no filtering needed. I
 realistically can't see any benefit to using a filter, and only possible
 downsides, the same conclusion we came to in the past:
 https://core.trac.wordpress.org/ticket/19654#comment:5

--
Ticket URL: <https://core.trac.wordpress.org/ticket/31288#comment:13>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform