Project

General

Profile

Actions
Copy link

Bug #85111

closed

HTTPS not used for cross-domain links without forceAbsoluteUrl

Added by Mathias Brodala almost 6 years ago. Updated over 5 years ago.

Status:
Closed
Priority:
Should have
Assignee:
-
Category:
-
Target version:
-
Start date:
2018-05-29
Due date:
% Done:

100%

Estimated time:
TYPO3 Version:
9
PHP Version:
Tags:
Complexity:
Is Regression:
Sprint Focus:

Description

If you add a cross-domain link and set forceAbsoluteUrl the link will use HTTPS if the current site uses HTTPS.

However, the same logic is missing in case forceAbsoluteUrl is not set which will normally lead to a relative link. Cross-domain links are absolute per definition however so all links will use HTTP instead of HTTPS.

Related issues 2 (0 open — 2 closed)

Has duplicate TYPO3 Core - Bug #85128: typolinkEnableLinksAcrossDomains builds insecure http:// links even when SSL is enabled for current domainClosed2018-05-31

Actions
Has duplicate TYPO3 Core - Bug #82797: PageLinkBuilder uses $absoluteUrlScheme outside of forceAbsoluteUrl but the scheme can only be changed when using forceAbsoluteUrlClosedWolfgang Klinger2017-10-18

Actions
Actions
Copy link

Also available in: Atom PDF