Merge "Do not redirect to HTTPS when it's not supported"
authorjenkins-bot <jenkins-bot@gerrit.wikimedia.org>
Tue, 31 May 2016 17:39:48 +0000 (17:39 +0000)
committerGerrit Code Review <gerrit@wikimedia.org>
Tue, 31 May 2016 17:39:48 +0000 (17:39 +0000)
includes/MediaWiki.php

index 55f9e9e..ee03f02 100644 (file)
@@ -680,6 +680,8 @@ class MediaWiki {
                // isLoggedIn() will do all sorts of weird stuff.
                if (
                        $request->getProtocol() == 'http' &&
+                       // switch to HTTPS only when supported by the server
+                       preg_match( '#^https://#', wfExpandUrl( $request->getRequestURL(), PROTO_HTTPS ) ) &&
                        (
                                $request->getSession()->shouldForceHTTPS() ||
                                // Check the cookie manually, for paranoia