[wp-trac] [WordPress Trac] #50339: setup-config.php serves mixed content when behind a TLS termination proxy

[WordPress Trac]

#50339: setup-config.php serves mixed content when behind a TLS termination proxy
-------------------------------+------------------------------
 Reporter:  simosx             |       Owner:  (none)
     Type:  defect (bug)       |      Status:  new
 Priority:  normal             |   Milestone:  Awaiting Review
Component:  Upgrade/Install    |     Version:
 Severity:  normal             |  Resolution:
 Keywords:  reporter-feedback  |     Focuses:
-------------------------------+------------------------------

Comment (by simosx):

 Thanks @johnbillion for looking into the patch.

 Indeed, that HTTP field is not appropriate because it is client-side
 (browser).
 The check should be on a server-side (from the TLS Termination Proxy)
 field.

 I believe the appropriate HTTP field should be HTTP_X_FORWARDED_PROTO
 instead, when it is set to `https`.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/50339#comment:4>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform