Project

General

Profile

Actions

Bug #63416

closed

ExtDirectApi.php doesn't switch to https

Added by Patrick Gaumond almost 10 years ago. Updated about 9 years ago.

Status:
Closed
Priority:
Should have
Assignee:
-
Category:
Backend API
Target version:
-
Start date:
2014-11-28
Due date:
% Done:

0%

Estimated time:
TYPO3 Version:
6.2
PHP Version:
5.5
Tags:
Complexity:
Is Regression:
No
Sprint Focus:

Description

Using TYPO3 version 6.2.7

My server is behind a proxy that handle SSL/HTTPS. Communication from Proxy to the actual site isn't under HTTPS.

[BE][lockSSL] = 0
(1 throw error about BE not available under SSL, 2 and 3 gives ERR_TOO_MANY_REDIRECTS)

If I call my BE like this: https://www.mysite.com/typo3/ the BE is ok except for the Pagetree. Using "inspect element" in Chrome, I got this error:

[blocked] The page at 'https://www.mysite.com/typo3/backend.php' was loaded over HTTPS, but ran insecure content from 'http://www.mysite.com/typo3/ajax.php?ajaxID=ExtDirect::route&namespace=TYPO3.Components.PageTree': this content should also be loaded over HTTPS.

Manually modifying /typo3/sysext/core/Classes/ExtDirect/ExtDirectApi.php around line 138 by hardcoding my site beginning with https make it works :

  • Doesn't work, use http: $url = \TYPO3\CMS\Core\Utility\GeneralUtility::locationHeaderUrl(\TYPO3\CMS\Core\Utility\GeneralUtility::getIndpEnv('TYPO3_SITE_URL') . TYPO3_mainDir . 'ajax.php?ajaxID=ExtDirect::route&namespace=');
  • Works by hardcoding : $url = 'https://www.mysite.com/' . TYPO3_mainDir . 'ajax.php?ajaxID=ExtDirect::route&namespace=';

Is this a bug or there's a way to make sure getIndpEnv('TYPO3_SITE_URL') will keep the site under https ?

Actions

Also available in: Atom PDF