Make WordPress Core

Opened 6 months ago

Last modified 6 months ago

#59708 new enhancement

get_allowed_http_origins(): Default list only HTTPS

Reported by: rebasaurus's profile rebasaurus Owned by:
Milestone: Awaiting Review Priority: normal
Severity: normal Version:
Component: HTTP API Keywords: has-patch
Focuses: Cc:

Description

https://core.trac.wordpress.org/changeset/20794 was when this was introduced. Is it worth revisiting to see if http protocols are still needed in 2023?

Attachments (1)

patch.patch (442 bytes) - added by rebasaurus 6 months ago.
Remove HTTP out of get_allowed_http_origins

Download all attachments as: .zip

Change History (2)

@rebasaurus
6 months ago

Remove HTTP out of get_allowed_http_origins

#1 @rebasaurus
6 months ago

  • Component changed from General to HTTP API
  • Keywords has-patch added
Note: See TracTickets for help on using tickets.