https://bugzilla.wikimedia.org/show_bug.cgi?id=48133
Web browser: ---
Bug ID: 48133
Summary: [InstantCommons] Some hotlinks of Commons files are
not protocol-relative
Product: MediaWiki
Version: 1.21-git
Hardware: All
URL: https://translatewiki.net/wiki/Thread:Support/Files_fr
om_Commons_loading_over_HTTP
OS: All
Status: NEW
Severity: major
Priority: Unprioritized
Component: File management
Assignee: [email protected]
Reporter: [email protected]
CC: [email protected], [email protected],
[email protected]
Blocks: 27946, 39480
Classification: Unclassified
Mobile Platform: ---
1) Visit https://translatewiki.net/wiki/Project:About (HTTPS)
2) Purge it
3) Check http://translatewiki.net/wiki/Project:About source
Observed: some hotlinks of Commons files are over HTTPS. (It used to be the
opposite, but it seems I can't reproduce by purging on HTTP...)
Expected: $wgUseInstantCommons includes protocol-relative resources and doesn't
add insecure content to secure pages.
On closer inspection this is even weirder, because some resources are
protocol-relative and some are not:
<img alt="Torchlight kopete.png"
src="https://upload.wikimedia.org/wikipedia/commons/5/57/Torchlight_kopete.png";
width="135" height="135" />
but
<img alt="P economy blue.png"
src="/w/images/thumb/1/1a/P_economy_blue.png/135px-P_economy_blue.png"
width="135" height="124"
srcset="https://upload.wikimedia.org/wikipedia/commons/1/1a/P_economy_blue.png
1.5x, https://upload.wikimedia.org/wikipedia/commons/1/1a/P_economy_blue.png
2x" />
(I've no idea what "srcset" is).
--
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
![https://upload.wikimedia.org/wikipedia/commons/5/57/Torchlight_kopete.png"](https://upload.wikimedia.org/wikipedia/commons/5/57/Torchlight_kopete.png"){kind=link}
