Chocobo1

>Currently, this feature is disabled unless the "Use HTTPS instead of HTTP" option is toggled and information about certificates is provided. For qbt viewpoint, it is doing the correct thing....

>Since you are intercepting/redirecting the traffic, you should modify the header on Cloudflare side. Not sure if Cloudflare provide such functionality though. What about it? Is Cloudflare configurable for the...

>The Worker service mentioned in this post now comes with free quotas, but I think the scripting for this purpose is still complicated. And you are just suggesting to move...

From https://developer.mozilla.org/en-US/docs/Web/HTTP/Cookies#block_access_to_your_cookies >A cookie with the Secure attribute is only sent to the server with an encrypted request over the HTTPS protocol. It's never sent with unsecured HTTP (except on...

>It seems qbt didn't follow the "except on localhost" part. This should be a valid bug. @Func86 Could you explain how does Cloudflare connect to webUI in your case? is...

>Yes, but I guess the doc means it needs the Host header of the request to be localhost? What is the value of `Host` header Cloudflare sends to webUI? UPDATE:...

>As far as I can see, the env().clientAddress would be set to the IP in the X-Forwarded-For header when the original value is within the trusted reverse proxy list. You...

>But I am really not sure if the behaviour change is correct, because it will serve cookies with the Secure flag even if the reverse proxy serves clients with HTTP....

I decided to support `X-forwarded-proto` for this use case. PR #21260 is updated.

>2. keeping pressed the left mouse button and try to select more files A quick workaround is to click on the first file and then click on the second file...