WordPress.org
Get WordPress

Make WordPress Core

Opened 2 years ago

Closed 7 weeks ago

#59708 closed enhancement (invalid)

get_allowed_http_origins(): Default list only HTTPS

Reported by: rebasaurus's profile rebasaurus Owned by:
Milestone: Awaiting Review Priority: normal
Severity: normal Version:
Component: HTTP API Keywords: has-patch
Focuses: Cc:

Description

https://core.trac.wordpress.org/changeset/20794 was when this was introduced. Is it worth revisiting to see if http protocols are still needed in 2023?

Attachments (1)

patch.patch​ (442 bytes) - added by rebasaurus 2 years ago.
Remove HTTP out of get_allowed_http_origins

Download all attachments as: .zip

Change History (3)

@rebasaurus
2 years ago

Remove HTTP out of get_allowed_http_origins

#1 @rebasaurus
2 years ago

  • Component changed from General to HTTP API
  • Keywords has-patch added

#2 @pmbaldha
7 weeks ago

  • Resolution set to invalid
  • Status changed from new to closed

@rebasaurus Many developers and users are testing WordPress websites on local machines. They don't install an SSL certificate on their local servers, so your request can't be fulfilled. I am closing the ticker as marked as invalid.

Note: See TracTickets for help on using tickets.