Status: New
Owner: ----
Labels: Type-Defect Priority-Medium
New issue 2768 by niklas.h...@gmail.com: Load gravatar pictures via https
http://code.google.com/p/reviewboard/issues/detail?id=2768
Serving my reviewboard via https, I get something like:
"Your connection to review.nh2.me is encrypted with 256-bit encryption.
However, this page includes other resources which are not secure. These
resources can be viewed by others while in transit and can be modified by
an attacker to change the look of the page."
This is because my site is served as https, but the gravatars are loaded
via plain http.
It would be an easy fix to change the URL to https in 'url
= "http://www.gravatar.com/avatar/%s"; % email_hash' in
djblets/gravatars/templatetags/gravatars.py.
--
You received this message because you are subscribed to the Google Groups
"reviewboard-issues" group.
To post to this group, send email to reviewboard-issues@googlegroups.com.
To unsubscribe from this group, send email to
reviewboard-issues+unsubscr...@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/reviewboard-issues?hl=en.
