[prev in list] [next in list] [prev in thread] [next in thread] 

List:       fossil-users
Subject:    [fossil-users] Requiring HTTPS for an online wiki -- secureurl and the base tag
From:       Paul Pereira <pjspereira () gmail ! com>
Date:       2016-07-14 20:09:02
Message-ID: CADN2MwAeSdJAcBR0bdyQOVcqK5iCofCwWymEf3_U1U6LUak97g () mail ! gmail ! com
[Download RAW message or body]

The skin header uses a base tag to set targets for relative URLs. Base
is set to $baseurl/$current_page by default, which is HTTP-only. In
addition to $baseurl, TH1 can also use $secureurl, which uses HTTPS
for logins.

I would like to always use HTTPS within the base tag. Can you provide
"httpsurl", or alternately change "secureurl" to be HTTPS-only? This
is set within style.c at the following lines:

  Th_Store("baseurl", g.zBaseURL);
  Th_Store("secureurl", login_wants_https_redirect()? g.zHttpsURL: g.zBaseURL);

The variable g.HttpsURL is already available. There are about 1/2
dozen files in src/ and doc/ that reference baseurl, secureurl, or
zHttpsURL.

Best regards,
Paul Pereira
_______________________________________________
fossil-users mailing list
fossil-users@lists.fossil-scm.org
http://lists.fossil-scm.org:8080/cgi-bin/mailman/listinfo/fossil-users
[prev in list] [next in list] [prev in thread] [next in thread]