comment form: "this content will be transmiitted over an insecure connection" warning

pwolanin - September 26, 2008 - 20:34
Project:Secure Pages
Version:5.x-1.6
Component:Code
Category:bug report
Priority:normal
Assigned:Unassigned
Status:needs review
Description

Setting "Switch back to http pages when there are no matches" and in combination with a custom url rewrite that adds an extra path element to certain node pages. The comment form is altered to have an absolute destination that is http, even when the node the comment is being submitted to is https. This gives an ugly: "this content will be transmiitted over an insecure connection" warning

This error will also happen if, for example, I manually put an https path in for (e.g.) a forum node and then submit a comment.

I think a more correct behavior is to let the form action be https if the current page is https.

#1

pwolanin - September 26, 2008 - 20:36
Status:active» needs review

like this.

AttachmentSize
https-action-314024-1.patch 838 bytes

#2

thehandyman - March 9, 2009 - 20:51

This patch doesn't apply to 1.22.2.11, is there an updated version? .11 still has this problem by default.

 
 

Drupal is a registered trademark of Dries Buytaert.