FUDforum: Bug Reports » Page links still contain HTTP instead of HTTPS

Home » FUDforum Development » Bug Reports » Page links still contain HTTP instead of HTTPS

Show: Today's Messages :: Polls :: Message Navigator

Page links still contain HTTP instead of HTTPS [message #187388]

Fri, 17 November 2017 16:50

TonyMarston

Messages: 32
Registered: April 2006
Location: Surrey, UK

Karma:

Member

My entire site now uses HTTPS, and as a security measure I have also enabled HSTS. Unfortunately even though the forum page is called using HTTPS all links within the page still use HTTP, which includes the <base> tag in the header.

This causes a problem with certain browsers like Firefox because when HSTS is enabled each page is forced to be run using HTTPS, and any links in the page which still use HTTP will be ignored. This means that no CSS files will be loaded, which means that the page is displayed incorrectly. If I turn off HSTS then the problem disappears.

Your code should check if the page is being run using the HTTPS protocol, and if so all the internal links should be switched from HTTP to HTTPS.

Tony Marston

Report message to a moderator

[Message index]

		Page links still contain HTTP instead of HTTPS By: TonyMarston on Fri, 17 November 2017 16:50
		Re: Page links still contain HTTP instead of HTTPS By: GaryM on Fri, 17 November 2017 18:36
		Aw: Re: Page links still contain HTTP instead of HTTPS By: alopezie on Sun, 19 November 2017 07:49

Previous Topic:	Can't backup - admdump
Next Topic:	Global Settings Manager

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Sat Nov 23 14:12:11 GMT 2024

Total time taken to generate the page: 0.05432 seconds