[wp-trac] [WordPress Trac] #52421: Remove admin and login exceptions for https in home_url

WordPress Trac noreply at wordpress.org
Tue Feb 2 10:13:54 UTC 2021


#52421: Remove admin and login exceptions for https in home_url
--------------------------+-----------------------------
 Reporter:  herregroen    |      Owner:  (none)
     Type:  defect (bug)  |     Status:  new
 Priority:  normal        |  Milestone:  Awaiting Review
Component:  General       |    Version:
 Severity:  normal        |   Keywords:
  Focuses:                |
--------------------------+-----------------------------
 Right now the home_url function will automatically switch to https if the
 current request is already https but will do so only on the front-end.

 This was likely created in a time when running the admin with a self-
 signed certificate with the rest of the site running http was a common
 use-case.

 Today is a very different situation thanks to initiatives like let's
 encrypt and many hosts providing certificates automatically or with little
 effort from site owners.

 These exceptions may result in users being changed from https to http when
 navigating from within their admin. In addition it leads to inconsistent
 behavior of `home_url` where it will generate different values in the
 admin and on the frontend.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/52421>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list