Ticket #38409: 38409.3.diff

wp-includes/js/customize-base.js

@@ -655 +655 @@
                                 var urlParser = document.createElement( 'a' );
                                 urlParser.href = to;
                                 // Port stripping needed by IE since it adds to host but not to event.origin.
-                                return urlParser.protocol + '//' + urlParser.host.replace( /:80$/, '' );
+                                return urlParser.protocol + '//' + urlParser.host.replace( /:(80|443)$/, '' );
                         });
 
                         // first add with no value

wp-includes/js/customize-preview.js

@@ -286 +286 @@
                         return false;
                 }
 
-                elementHost = element.host.replace( /:80$/, '' );
+                elementHost = element.host.replace( /:(80|443)$/, '' );
                 parsedAllowedUrl = document.createElement( 'a' );
                 matchesAllowedUrl = ! _.isUndefined( _.find( api.settings.url.allowed, function( allowedUrl ) {
                         parsedAllowedUrl.href = allowedUrl;
-                        return parsedAllowedUrl.protocol === element.protocol && parsedAllowedUrl.host.replace( /:80$/, '' ) === elementHost && 0 === element.pathname.indexOf( parsedAllowedUrl.pathname.replace( /\/$/, '' ) );
+                        return parsedAllowedUrl.protocol === element.protocol && parsedAllowedUrl.host.replace( /:(80|443)$/, '' ) === elementHost && 0 === element.pathname.indexOf( parsedAllowedUrl.pathname.replace( /\/$/, '' ) );
                 } ) );
                 if ( ! matchesAllowedUrl ) {
                         return false;