Page 1 of 1

Plugin freetag not compatible with HTTPS connections

Posted: Sun Sep 25, 2011 2:50 pm
by Manko10
Hi,

the pluginfreetag is not compatible with HTTPS connections and causes mixed content in the backend.
In line 897 of the file seredenipty_event_freetag the following script tag is hardcoded:

Code: Select all

<script src="http://ajax.googleapis.com/ajax/libs/jquery/1/jquery.min.js" type="text/javascript"></script>
This should be changed to

Code: Select all

<script src="https://ajax.googleapis.com/ajax/libs/jquery/1/jquery.min.js" type="text/javascript"></script>
so that encrypted connections cannot be occupied by a MITM.

Re: Plugin freetag not compatible with HTTPS connections

Posted: Mon Sep 26, 2011 10:41 am
by garvinhicking
Hi!

Good catch, thanks. I just committed an update.

Regards,
Garvin