ElkArte Community

Elk Development => Bug Reports => Topic started by: radu81 on April 13, 2018, 03:28:26 am

Title: Sometimes SSL connection is not secure in Like Stats
Post by: radu81 on April 13, 2018, 03:28:26 am
It happends on my test forum, but also here on elkarte. To reproduce this go to Community > Like Stats (https://www.elkarte.net/community/index.php?action=likes;sa=likestats) and click on the tabs in that page. At some point you will notice that SSL connection is not secure anymore. It seems that it tries to get some attachment from http instead of https.
Title: Re: Sometimes SSL connection is not secure in Like Stats
Post by: emanuele on April 13, 2018, 04:52:56 am
As usual the avatars...
Any time you think you have spotted all the places the darn avatars are showed incorrectly, one more pops up. :-\
Title: Re: Sometimes SSL connection is not secure in Like Stats
Post by: badmonkey on April 13, 2018, 08:46:43 am
Confirmed here on Elk.  That said, bug squishing within the software aside, perhaps this is also the opportunity to mention another approach.  Another means of addressing this is using HSTS.  All site connections are forced to https.   ;)