id	summary	reporter	owner	description	type	status	component	version	severity	resolution	keywords	cc	stage	has_patch	needs_docs	needs_tests	needs_better_patch	easy	ui_ux
11902	HttpRequest is_secure does not obey WSGI	ianb	nobody	"The implementation of HttpRequest.is_secure() is:

{{{
    def is_secure(self):
        return os.environ.get(""HTTPS"") == ""on""
}}}

This is wrong with respect to WSGI.  Actually any use of {{{os.environ}}} is wrong with respect to WSGI.  For WSGI it would be:

{{{
    def is_secure(self):
        return self.META.get('wsgi.url_scheme') == 'https'
}}}
"		closed	Core (Other)	1.1		invalid	wsgi	ianb@…	Unreviewed	0	0	0	0	0	0