Opened 12 years ago

Closed 12 years ago

#5604 closed (fixed)

Access over HTTPS broken when using WSGI

Reported by: Ramiro Morales Owned by: nobody
Component: HTTP handling Version: master
Severity: Keywords:
Cc: Triage Stage: Ready for checkin
Has patch: yes Needs documentation: no
Needs tests: no Patch needs improvement: no
Easy pickings: no UI/UX: no


The WSGI handler relies on the presence of the 'HTTPS' environment var to detect the use of HTTPS.

WSGI spec dictates a server-side implementation MUST export a 'wsgi.url_scheme' var and SHOULD
export a 'HTTPS' var.

Fix is a one-line patch.

discussed on:

Attachments (1)

wsgi_https.diff (655 bytes) - added by Ramiro Morales 12 years ago.

Download all attachments as: .zip

Change History (4)

Changed 12 years ago by Ramiro Morales

Attachment: wsgi_https.diff added

comment:1 Changed 12 years ago by Ramiro Morales

Has patch: set

comment:2 Changed 12 years ago by Chris Beaven

Triage Stage: UnreviewedReady for checkin

Yep, it's good.

comment:3 Changed 12 years ago by Gary Wilson

Resolution: fixed
Status: newclosed

(In [6428]) Fixed #5604 -- Check for use of HTTPS by looking at the wsgi.url_scheme environment variable instead of the HTTPS environment variable since wsgi.url_scheme is required by the WSGI spec, while HTTPS is not. Thanks, ramiro.

Note: See TracTickets for help on using tickets.
Back to Top