Opened 5 weeks ago
Last modified 5 weeks ago
#62921 new feature request
Multi-site subdomain sub-site home and siteurl scheme breaks FSE themes custom fonts
| Reported by: |
|
Owned by: | |
|---|---|---|---|
| Milestone: | Awaiting Review | Priority: | normal |
| Severity: | normal | Version: | 6.7.1 |
| Component: | Networks and Sites | Keywords: | |
| Focuses: | multisite | Cc: |
Description
On a Multi-site in subdomaine mode, where the main site home and siterurl are both on https, newly created sub-sites will have http instead of https. Looking at [install_blog()](https://core.trac.wordpress.org/browser/tags/4.9.4/src/wp-includes/ms-functions.php#L1434) This appears to be by design. Only when ! is_subdomain_install() and the main site is on https, the home ans siteurl are forced to https.
I see the logic in this. Not everyone might have a wildcard SSL ready.
But it does create a problem:
If there is a wildcard SSL license, and http>https redirects, HTST or browser preferences in place, subsites will be accessed over https.
When such a sub-site uses (for example) the Twenty Twenty-Five theme and the site admin has set a custom font downloaded via the Google Fonts dialog in the Site Editor, the resource will be referenced over http in the front end page source.
These are blocked by the browser as insecure requests and the font will not be rendered on the site.
Only manually setting each home and siteurl for each subsite via the Network > Sites admin (or directly in the DB) solves the issue.
An annoying little issue that might be solved by a network option like "Site uses HTTPS" under Network > Settings > New Site Settings.
Sorry, I realized too late that I referenced a now deprecated function install_blog()... But the issue remains the same.
Found a *very* old ticket #27499 discussing this topic but was closed with a wontfix :/
However, I do feel the topic has become more relevant through this apparent conflict with the Site Editor custom fonts feature.