WordPress.org
Get WordPress

Make WordPress Core

Opened 8 years ago

Closed 4 months ago

#38261 closed enhancement (duplicate)

A FORCE_SSL_SCRIPTS constant

Reported by: loreleiaurora's profile LoreleiAurora Owned by:
Milestone: Priority: normal
Severity: normal Version:
Component: Security Keywords:
Focuses: Cc:

Description

If this constant is set, we will:

  • Force local enqueued scripts and styles to https
  • Force non-local enqueued scripts and styles to https

Change History (3)

#1 @mark-k
8 years ago

The external urls part is problematic, not everybody serves the same content from urls in which the only difference is the protocol. vimeo is a notable offender, but might not be the only one.

hmmm can't find the documentation right now but I remember I ran into it about a year ago.

#3 @iandunn
6 years ago

  • Resolution set to maybelater

Switching from wontfix to maybelater, since that's more accurate.

xref: ​https://make.wordpress.org/core/2019/01/14/follow-up-on-recent-trac-bulk-edit/

#4 @johnbillion
4 months ago

  • Milestone Awaiting Review deleted
  • Resolution changed from maybelater to duplicate
  • Status changed from new to closed

Re-closing as a duplicate of #28521. The original plan was to split that ticket out, but it never went anywhere.

Note: See TracTickets for help on using tickets.