Page MenuHomePhabricator

Klaxon redirects to http://klaxon.wikimedia.org (not https)
Closed, ResolvedPublic

Description

After sending a manual page with Klaxon, it redirects you to the front page. However that redirect happens with the http protocol (not https), so users with strict https mode enabled on their browser might end up on a warning page instead of the actual klaxon front page. It's also unclear to the user if the page went through or not.

Event Timeline

Change 794759 had a related patch set uploaded (by Legoktm; author: Legoktm):

[operations/software/klaxon@master] Use ProxyFix middleware to correctly recognize HTTPS usage

https://gerrit.wikimedia.org/r/794759

Change 794759 merged by jenkins-bot:

[operations/software/klaxon@master] Use ProxyFix middleware to correctly recognize HTTPS usage

https://gerrit.wikimedia.org/r/794759

Unfortunately I had to revert the above patch because the necessary middlewear library isn't included in Debian's python3-werkzeug until Bullseye.

Change 814251 had a related patch set uploaded (by CDanis; author: CDanis):

[operations/software/klaxon@master] Use ProxyFix middleware to recognize HTTPS usage, attempt #2

https://gerrit.wikimedia.org/r/814251

Change 814251 merged by jenkins-bot:

[operations/software/klaxon@master] Use ProxyFix middleware to recognize HTTPS usage, attempt #2

https://gerrit.wikimedia.org/r/814251

Thanks to @Legoktm for catching that this was packaged pre-Bullseye under a different name.