WordPress.org
Get WordPress

Make WordPress Core

Opened 10 years ago

Closed 2 years ago

#38261 closed enhancement (duplicate)

A FORCE_SSL_SCRIPTS constant

Reported by: LoreleiAurora Owned by:
Priority: normal Milestone:
Component: Security Version:
Severity: normal Keywords:
Cc: Focuses:

Description

If this constant is set, we will:

  • Force local enqueued scripts and styles to https
  • Force non-local enqueued scripts and styles to https

Change History (3)

#1 @mark-k
10 years ago

The external urls part is problematic, not everybody serves the same content from urls in which the only difference is the protocol. vimeo is a notable offender, but might not be the only one.

hmmm can't find the documentation right now but I remember I ran into it about a year ago.

#3 @iandunn
8 years ago

  • Resolution → maybelater

Switching from wontfix to maybelater, since that's more accurate.

xref: ​https://make.wordpress.org/core/2019/01/14/follow-up-on-recent-trac-bulk-edit/

#4 @johnbillion
2 years ago

  • Milestone Awaiting Review
  • Resolution maybelater → duplicate
  • Status new → closed

Re-closing as a duplicate of #28521. The original plan was to split that ticket out, but it never went anywhere.

Note: See TracTickets for help on using tickets.