View Issue Details
ID | Project | Category | View Status | Date Submitted | Last Update |
---|---|---|---|---|---|
0017741 | phpList 3 application | Security | public | 06-07-15 21:41 | 16-01-19 09:49 |
Reporter | hedrickbt | Assigned To | |||
Priority | normal | Severity | minor | Reproducibility | always |
Status | resolved | Resolution | fixed | ||
Product Version | 3.0.12 | ||||
Fixed in Version | 3.2.0 | ||||
Summary | 0017741: Hard coded link on page to http:// causes security error in browsers | ||||
Description | The powered by image in public_html/lists/admin/connect.php is hard coded to http. | ||||
Steps To Reproduce | Access the phpList app via https. You should see something in the browser that indicates the page is not completely secure. | ||||
Tags | No tags attached. | ||||
|
I have created a pull request on github with the fix to this issue. |
|
hmm, I'm afraid that won't work, as eg https://powered.phplist.com/images/pixel.gif doesn't work. |
|
what does work though on https is https://d3u7tsw7cvar0t.cloudfront.net/images/pixel.gif I will update that. |
|
I have updated it to use the S3 address. https://github.com/phpList/phplist3/commit/7223be7738c33830024fa6248fc94cd794c5b9dd |