FUDforum
Fast Uncompromising Discussions. FUDforum will get your users talking.

Home » FUDforum Development » Bug Reports » Page links still contain HTTP instead of HTTPS
Show: Today's Messages :: Unread Messages :: Polls :: Message Navigator
| Subscribe to topic | Bookmark topic 
Switch to threaded view of this topic Create a new topic Submit Reply
Page links still contain HTTP instead of HTTPS [message #187388] Fri, 17 November 2017 11:50 Go to next message
TonyMarston is currently offline  TonyMarston   United Kingdom
Messages: 32
Registered: April 2006
Location: Surrey, UK
Karma: 0
Member
add to buddy list
ignore all messages by this user
My entire site now uses HTTPS, and as a security measure I have also enabled HSTS. Unfortunately even though the forum page is called using HTTPS all links within the page still use HTTP, which includes the <base> tag in the header.

This causes a problem with certain browsers like Firefox because when HSTS is enabled each page is forced to be run using HTTPS, and any links in the page which still use HTTP will be ignored. This means that no CSS files will be loaded, which means that the page is displayed incorrectly. If I turn off HSTS then the problem disappears.

Your code should check if the page is being run using the HTTPS protocol, and if so all the internal links should be switched from HTTP to HTTPS.


Tony Marston
Message by GaryM is ignored  [reveal message]  [reveal all messages by GaryM]  [stop ignoring this user] Go to previous messageGo to next message
Message by alopezie is ignored  [reveal message]  [reveal all messages by alopezie]  [stop ignoring this user] Go to previous message
Quick Reply
Formatting Tools:   
  Switch to threaded view of this topic Create a new topic
Previous Topic: Can't backup - admdump
Next Topic: Global Settings Manager
Goto Forum:
  

-=] Back to Top [=-
[ Syndicate this forum (XML) ] [ RSS ]

Current Time: Tue Apr 20 06:50:21 EDT 2021

Total time taken to generate the page: 0.00739 seconds