https://bugzilla.wikimedia.org/show_bug.cgi?id=49698
Web browser: ---
Bug ID: 49698
Summary: When uploading from Flickr, unencrypted XHRs are sent
from client to Flickr despite being on https://
Product: MediaWiki extensions
Version: unspecified
Hardware: All
OS: All
Status: NEW
Severity: normal
Priority: Unprioritized
Component: UploadWizard
Assignee: [email protected]
Reporter: [email protected]
CC: [email protected], [email protected]
Classification: Unclassified
Mobile Platform: ---
Original bug title:
When uploading from Flickr, unencrypted XHRs are sent from client to Flickr
despite being on https://
(specifically to http://api.flickr.com/services/rest/?)
I think this will be a real issue after Firefox prompts by default when attempt
to connect to http while being on https.
I read about the issues with the proxy which can't fetch the images from HTTPS
(Bug 42468). If required, you'll have to set up just another proxy forwarding
the API requests from the client to flickr's http API:
client <<-- encrypted traffic -->> proxy <<-- unencrypted traffic -->> flickr
API
The proposed procedure would also enable you to hide the API - key.
--
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
