[wp-trac] [WordPress Trac] #28658: is_ssl() may fail on ssl, relying on mod_ssl.
WordPress Trac
noreply at wordpress.org
Tue Jan 3 12:45:23 UTC 2017
#28658: is_ssl() may fail on ssl, relying on mod_ssl.
--------------------------+------------------------
Reporter: mampf | Owner:
Type: defect (bug) | Status: closed
Priority: normal | Milestone:
Component: Security | Version: 3.9.1
Severity: normal | Resolution: duplicate
Keywords: | Focuses:
--------------------------+------------------------
Changes (by dd32):
* keywords: reporter-feedback 2nd-opinion =>
* status: new => closed
* resolution: => duplicate
* milestone: Awaiting Review =>
Comment:
Ultimately it's down to the server configuration to properly let the
applications know that SSL is in use - forwarding variables which the
application cannot detect as coming from a legitimate upstream is a
challenge in itself, which has been greatly discussed in #31288
--
Ticket URL: <https://core.trac.wordpress.org/ticket/28658#comment:5>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list