[wp-trac] [WordPress Trac] #52421: Remove admin and login exceptions for https in home_url
WordPress Trac
noreply at wordpress.org
Tue Feb 2 10:13:54 UTC 2021
#52421: Remove admin and login exceptions for https in home_url
--------------------------+-----------------------------
Reporter: herregroen | Owner: (none)
Type: defect (bug) | Status: new
Priority: normal | Milestone: Awaiting Review
Component: General | Version:
Severity: normal | Keywords:
Focuses: |
--------------------------+-----------------------------
Right now the home_url function will automatically switch to https if the
current request is already https but will do so only on the front-end.
This was likely created in a time when running the admin with a self-
signed certificate with the rest of the site running http was a common
use-case.
Today is a very different situation thanks to initiatives like let's
encrypt and many hosts providing certificates automatically or with little
effort from site owners.
These exceptions may result in users being changed from https to http when
navigating from within their admin. In addition it leads to inconsistent
behavior of `home_url` where it will generate different values in the
admin and on the frontend.
--
Ticket URL: <https://core.trac.wordpress.org/ticket/52421>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list