[Bug 29986] $wgSecureLogin fails to handle page links, non-SSL content

2013-09-06 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=29986

Andre Klapper aklap...@wikimedia.org changed:

   What|Removed |Added

   Keywords||testme
 Status|NEW |UNCONFIRMED
 Ever confirmed|1   |0

--- Comment #6 from Andre Klapper aklap...@wikimedia.org ---
This really needs retesting now that SecureLogin is enabled by default. See
https://meta.wikimedia.org/wiki/HTTPS

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 29986] $wgSecureLogin fails to handle page links, non-SSL content

2013-09-06 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=29986

Tyler Romeo tylerro...@gmail.com changed:

   What|Removed |Added

   Keywords|testme  |
 Status|UNCONFIRMED |NEW
 Ever confirmed|0   |1

--- Comment #7 from Tyler Romeo tylerro...@gmail.com ---
The bug definitely still exists (you can test it now on Wikipedia itself).
However, we may consider WONTFIXing this.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 29986] $wgSecureLogin fails to handle page links, non-SSL content

2011-07-25 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=29986

Mark A. Hershberger m...@everybody.org changed:

   What|Removed |Added

   Priority|Unprioritized   |Normal
 CC||m...@everybody.org

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 29986] $wgSecureLogin fails to handle page links, non-SSL content

2011-07-20 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=29986

--- Comment #1 from Dan Barrett mediaw...@blazemonger.com 2011-07-20 19:47:30 
UTC ---
Created attachment 8807
  -- https://bugzilla.wikimedia.org/attachment.cgi?id=8807
SecureLoginPage_body.php

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 29986] $wgSecureLogin fails to handle page links, non-SSL content

2011-07-20 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=29986

Roan Kattouw roan.katt...@gmail.com changed:

   What|Removed |Added

 CC||roan.katt...@gmail.com

--- Comment #2 from Roan Kattouw roan.katt...@gmail.com 2011-07-20 20:25:57 
UTC ---
We're already working on making URLs in MediaWiki protocol-relative as much as
possible. Basically, if you set $wgServer = '//wiki.example.com'; in trunk as
of a few days ago, that'll mostly work as you expect.

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 29986] $wgSecureLogin fails to handle page links, non-SSL content

2011-07-20 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=29986

Roan Kattouw roan.katt...@gmail.com changed:

   What|Removed |Added

   Attachment #8806|text/x-wiki |text/plain
  mime type||

--- Comment #3 from Roan Kattouw roan.katt...@gmail.com 2011-07-20 20:28:57 
UTC ---
Comment on attachment 8806
  -- https://bugzilla.wikimedia.org/attachment.cgi?id=8806
SecureLoginPage.php

Change MIME types of PHP files to plain text so Bugzilla will hopefully display
them to me without making me download them.

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 29986] $wgSecureLogin fails to handle page links, non-SSL content

2011-07-20 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=29986

Roan Kattouw roan.katt...@gmail.com changed:

   What|Removed |Added

   Attachment #8807|text/x-wiki |text/plain
  mime type||

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 29986] $wgSecureLogin fails to handle page links, non-SSL content

2011-07-20 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=29986

--- Comment #4 from Brion Vibber br...@wikimedia.org 2011-07-20 20:35:12 UTC 
---
Using protocol-relative links doesn't have any effect on case 1) since those
links are always on the local protocol/host anyway.

Proper 'fix' for that is of course to always use SSL for all logged-in sessions
at all times, which is much safer.

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 29986] $wgSecureLogin fails to handle page links, non-SSL content

2011-07-20 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=29986

--- Comment #5 from Dan Barrett mediaw...@blazemonger.com 2011-07-20 20:41:57 
UTC ---
Brion: I see your point about security. Until such time that Wikipedia goes
100% SSL, it would be great if the secure login feature just followed the
contract with its user: delivering articles over http unless the user has
logged in and checked the everything SSL checkbox.  Seem reasonable?

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l