[wp-trac] [WordPress Trac] #47577: Streamline detecting and enabling HTTPS

WordPress Trac noreply at wordpress.org
Sat Jun 22 20:43:30 UTC 2019


#47577: Streamline detecting and enabling HTTPS
-------------------------------------------------+-------------------------
 Reporter:  flixos90                             |       Owner:  (none)
     Type:  enhancement                          |      Status:  new
 Priority:  normal                               |   Milestone:  Awaiting
                                                 |  Review
Component:  Administration                       |     Version:
 Severity:  normal                               |  Resolution:
 Keywords:  2nd-opinion needs-unit-tests has-    |     Focuses:
  patch                                          |
-------------------------------------------------+-------------------------

Comment (by westonruter):

 Replying to [comment:1 flixos90]:
 > * If HTTPS is active, filter and replace non-HTTP links to the site in
 content with their HTTPS counterparts.

 I suggest also adding a `upgrade-insecure-requests` CSP directive to
 automatically handle this outside fo the content:
 https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-
 Security-Policy/upgrade-insecure-requests

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/47577#comment:4>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list