Project

General

Profile

Actions

Bug #67185

closed

HSTS vs. preferred protocol

Added by Christoph Schwarzenberg almost 9 years ago. Updated over 5 years ago.

Status:
Closed
Priority:
Could have
Assignee:
-
Category:
Frontend
Target version:
-
Start date:
2015-05-28
Due date:
% Done:

0%

Estimated time:
TYPO3 Version:
6.2
PHP Version:
5.6
Tags:
Complexity:
Is Regression:
No
Sprint Focus:

Description

Hi,

if one enables HSTS (HTTP Strict Transport Security) on the server and sets the "Use Protocol"*-Setting to HTTP, the visitor gets stuck in an infinite 301-Redirect loop when calling this page.

My TYPO3 installation is deployed via nginx 1.6.2 using php-fpm 5.6.7.
Firefox (v 38.0) sometimes shows an error "The page isn't redirecting properly", sometimes, it just keeps following the redirects forever.

The server sends:
301 Moved Permanently
Location: http://<URL>

Firefox tries (because of HSTS) to call https://&lt;URL>

I am not sure, if there is a fix to this. Maybe analysing get_headers() is an option.

*Edit Page > Behaviour > Use Protocol: Set to http://

Christoph

Actions

Also available in: Atom PDF