Update links to https and www (/security page and codebase)

Created on 12 September 2024, 3 months ago
Updated 18 September 2024, 3 months ago

Problem/Motivation

There's a few urls in the codebase that use HTTP instead of HTTPS and some (many the same) that use drupal.org without www.drupal.org in front.

This creates a very small security risk that is mostly mitigated by hsts AND may create some weird bugs for clients that don't handle forwards properly (I'm thinking RSS client or something).

Steps to reproduce

1. clone this repository
2. grep for stuff and find several examples:

greggles@Gregs-MacBook-Pro ~/c/drupalorg (7.x-3.x)> grep -r -e 'http://[w.]*drupal.org' * | wc -l
      29
greggles@Gregs-MacBook-Pro ~/c/drupalorg (7.x-3.x)> grep -r -e 'http[s]*://drupal.org' * | wc -l
      30

Proposed resolution

Update the urls.

Remaining tasks

Doing it.

User interface changes

Not really aplicable.

API changes

n/a

Data model changes

n/a

πŸ“Œ Task
Status

Needs review

Version

3.0

Component

Code

Created by

πŸ‡ΊπŸ‡ΈUnited States greggles Denver, Colorado, USA

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Merge Requests

Comments & Activities

Production build 0.71.5 2024