View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0017741 | phpList 3 application | Security | public | 06-07-15 21:41 | 16-01-19 09:49 |
| Reporter | hedrickbt | ||||
| Priority | normal | Severity | minor | Reproducibility | always |
| Status | resolved | Resolution | fixed | ||
| Product Version | 3.0.12 | ||||
| Target Version | Fixed in Version | 3.2.0 | |||
| Summary | 0017741: Hard coded link on page to http:// causes security error in browsers | ||||
| Description | The powered by image in public_html/lists/admin/connect.php is hard coded to http. | ||||
| Steps To Reproduce | Access the phpList app via https. You should see something in the browser that indicates the page is not completely secure. | ||||
| Tags | No tags attached. | ||||
|
|
I have created a pull request on github with the fix to this issue. |
|
|
hmm, I'm afraid that won't work, as eg https://powered.phplist.com/images/pixel.gif doesn't work. |
|
|
what does work though on https is https://d3u7tsw7cvar0t.cloudfront.net/images/pixel.gif I will update that. |
|
|
I have updated it to use the S3 address. https://github.com/phpList/phplist3/commit/7223be7738c33830024fa6248fc94cd794c5b9dd |
