From 0e81846b4d07b4abfc5da092e30e19353e6d0bb2 Mon Sep 17 00:00:00 2001 From: "lpsolit%gmail.com" <> Date: Mon, 22 Aug 2005 02:30:07 +0000 Subject: [PATCH] =?utf8?q?Bug=20300093:=20index.cgi=20remains=20unsecure?= =?utf8?q?=20when=20the=20SSL=20parameter=20is=20set=20to=20"authenticated?= =?utf8?q?=20sessions"=20-=20Patch=20by=20Fr=C3=A9d=C3=A9ric=20Buclin=20=20r/a=3Djustdave?= MIME-Version: 1.0 Content-Type: text/plain; charset=utf8 Content-Transfer-Encoding: 8bit --- index.cgi | 6 ++++++ template/en/default/global/useful-links.html.tmpl | 2 +- 2 files changed, 7 insertions(+), 1 deletion(-) diff --git a/index.cgi b/index.cgi index 88393b4178..124c81b7a3 100755 --- a/index.cgi +++ b/index.cgi @@ -45,6 +45,12 @@ Bugzilla->login(LOGIN_OPTIONAL); ############################################################################### my $cgi = Bugzilla->cgi; +# Force to use HTTPS unless Param('ssl') equals 'never'. +# This is required because the user may want to log in from here. +if (Param('sslbase') ne '' and Param('ssl') ne 'never') { + $cgi->require_https(Param('sslbase')); +} + my $template = Bugzilla->template; # Return the appropriate HTTP response headers. diff --git a/template/en/default/global/useful-links.html.tmpl b/template/en/default/global/useful-links.html.tmpl index 38b193cf57..63dfe0b048 100644 --- a/template/en/default/global/useful-links.html.tmpl +++ b/template/en/default/global/useful-links.html.tmpl @@ -30,7 +30,7 @@