jetpack icon indicating copy to clipboard operation
jetpack copied to clipboard

HTTP static pages served to HTTPS resulting in mixed content issues

Open kraftbj opened this issue 8 years ago • 1 comments

Reported via w.org slack: https://wordpress.slack.com/archives/core-images/p1458158727000084 supercache creates files for both protocols, i.e. if you go to the home page of a site on http, SC creates index.html, and if you visit using ssl, then you get index-https.html

but for posts/pages not the home page, if you first visit the site on http it creates /sitename/pagename/index.html

and if you then visit on https it ​doesn’t​ create another file, it just serves the http version

so all of your assets get blocked

kraftbj avatar Mar 16 '16 20:03 kraftbj

I wasn't able to reproduce this on my local Docker image (w/ nginx proxying) or my main sandbox. All pages and posts generated the appropriate index.html and index-https.html files and served them correctly. I also tested this on mobile and it produced index-https-mobile.html and index-mobile.html.

I also don't see any obvious changes to supercache_filename() or its callers that would have prevented this from happening. Looking at the Slack messages, I'm not sure if we ever tried to reproduce out of their large instance. Have we had other reports?

jom avatar Oct 25 '17 16:10 jom