WordPress.org

Make WordPress Core

Opened 4 years ago

Last modified 16 months ago

#38261 new enhancement (maybelater)

A FORCE_SSL_SCRIPTS constant

Reported by: LoreleiAurora Owned by:
Milestone: Awaiting Review Priority: normal
Severity: normal Version:
Component: Security Keywords:
Focuses: Cc:

Description

If this constant is set, we will:

  • Force local enqueued scripts and styles to https
  • Force non-local enqueued scripts and styles to https

Change History (2)

#1 @mark-k
4 years ago

The external urls part is problematic, not everybody serves the same content from urls in which the only difference is the protocol. vimeo is a notable offender, but might not be the only one.

hmmm can't find the documentation right now but I remember I ran into it about a year ago.

#3 @iandunn
20 months ago

  • Resolution set to maybelater

Switching from wontfix to maybelater, since that's more accurate.

xref: https://make.wordpress.org/core/2019/01/14/follow-up-on-recent-trac-bulk-edit/

Note: See TracTickets for help on using tickets.