Opened 5 years ago

Last modified 2 years ago

#17300 assigned defect

Form action on does not get rewritten

Reported by: cypherpunks Owned by: legind
Priority: Medium Milestone:
Component: HTTPS Everywhere/EFF-HTTPS Everywhere Version:
Severity: Normal Keywords: httpse-ruleset-bug
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:


On (forum), registered users can reply to topics. When you hit the button to see either a preview or actually post the message, Firefox (I think Chrome didn't, but don't know if that means it just kept quiet or rewrote the link) will complain saying "The information you have entered on this page will be sent over an insecure connection". Example:

<form action="" method="post" id="message_form" class="form2 altmsg1 insertMessage" onsubmit="return this.preview

Yes, they use absolute http-URLs everywhere.

Child Tickets

Change History (2)

comment:1 Changed 3 years ago by teor

Severity: Normal

Set all open tickets without a severity to "Normal"

comment:2 Changed 2 years ago by teor

Owner: changed from jsha to legind
Status: newassigned

Make legind the owner of all HTTPS Everywhere tickets that were mistakenly assigned to jsha.
(See #26397.)

Note: See TracTickets for help on using tickets.