WordPress.org
Get WordPress

Make WordPress Core

Opened 13 years ago

Closed 12 years ago

#25484 closed enhancement (fixed)

Thumbnails on Install Themes screen breaks SSL

Reported by: johnbillion Owned by:
Priority: normal Milestone:
Component: Themes Version:
Severity: normal Keywords:
Cc: Focuses: administration

Description

The thumbnails on the Install Themes screen are always loaded over HTTP, which produces a mixed content warning when using admin over SSL.

There are two parts to this:

  1. The site that theme thumbnails are loaded from (wp-themes.com) needs a valid SSL certificate. Current if you try to load a theme thumbnail over SSL you'll get a certificate warning because the cert is for wordpress.org.
  2. The thumbnails need to respect the admin area scheme when they're loaded.

Additionally, it's a bit odd that these thumbnails (and the theme previewer) come from wp-themes.com, which is not a familiar domain. Is there a reason it's not using wordpress.org or a subdomain thereof?

Change History (4)

#2 @toscho
13 years ago

  • Cc info@… added

#3 @jeremyfelt
13 years ago

  • Component Administration → Themes
  • Focuses admin added

#4 @johnbillion
12 years ago

  • Milestone Awaiting Review
  • Resolution → fixed
  • Status new → closed

This has been fixed in recent months. Theme thumbnails are now loaded from ts.w.org and the URLs are protocol-relative.

Note: See TracTickets for help on using tickets.