Page MenuHomePhabricator

Redirect http to https on new codesearch.wmflabs.org
Closed, ResolvedPublic

Description

As all wikis using https-everywhere, the tool on wmflabs should do that, too.

http://codesearch.wmflabs.org/search/ -> https://codesearch.wmflabs.org/search/

Event Timeline

Legoktm subscribed.

Ideally T120486: Set "https_upgrade" configuration flag for domainproxy to enforce HTTPS upgrade for GET|HEAD requests would be implemented, but I think we can probably hack around this the same way as I do in toolforge tools...

Change 400850 had a related patch set uploaded (by Legoktm; owner: Legoktm):
[labs/codesearch@master] Redirect all HTTP requests to HTTPS

https://gerrit.wikimedia.org/r/400850

Change 400850 merged by Legoktm:
[labs/codesearch@master] Redirect all HTTP requests to HTTPS

https://gerrit.wikimedia.org/r/400850

So it's HTTPS-only except...

km@km-pt ~> curl -I "https://codesearch.wmflabs.org/" | grep location
location: http://codesearch.wmflabs.org/search/

Change 400858 had a related patch set uploaded (by Legoktm; owner: Legoktm):
[labs/codesearch@master] Set HSTS header for one day

https://gerrit.wikimedia.org/r/400858

Change 400858 merged by Legoktm:
[labs/codesearch@master] Set HSTS header for one day

https://gerrit.wikimedia.org/r/400858

OK, with HSTS it should always always use HTTPS now.