Opened 8 years ago
Last modified 5 years ago
#38261 new enhancement (maybelater)
A FORCE_SSL_SCRIPTS constant
Reported by: | LoreleiAurora | Owned by: | |
---|---|---|---|
Milestone: | Awaiting Review | Priority: | normal |
Severity: | normal | Version: | |
Component: | Security | Keywords: | |
Focuses: | Cc: |
Description
If this constant is set, we will:
- Force local enqueued scripts and styles to https
- Force non-local enqueued scripts and styles to https
Change History (2)
Note: See
TracTickets for help on using
tickets.
The external urls part is problematic, not everybody serves the same content from urls in which the only difference is the protocol. vimeo is a notable offender, but might not be the only one.
hmmm can't find the documentation right now but I remember I ran into it about a year ago.