Opened 4 years ago

Last modified 12 months ago

#17300 assigned defect

Form action on tweakers.net does not get rewritten

Reported by: cypherpunks Owned by: legind
Priority: Medium Milestone:
Component: HTTPS Everywhere/EFF-HTTPS Everywhere Version:
Severity: Normal Keywords: httpse-ruleset-bug
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

On gathering.tweakers.net (forum), registered users can reply to topics. When you hit the button to see either a preview or actually post the message, Firefox (I think Chrome didn't, but don't know if that means it just kept quiet or rewrote the link) will complain saying "The information you have entered on this page will be sent over an insecure connection". Example:

<form action="http://gathering.tweakers.net/forum/insert_message/1601768" method="post" id="message_form" class="form2 altmsg1 insertMessage" onsubmit="return this.preview
checknewmessageform(this)">

Yes, they use absolute http-URLs everywhere.

Child Tickets

Change History (2)

comment:1 Changed 19 months ago by teor

Severity: Normal

Set all open tickets without a severity to "Normal"

comment:2 Changed 12 months ago by teor

Owner: changed from jsha to legind
Status: newassigned

Make legind the owner of all HTTPS Everywhere tickets that were mistakenly assigned to jsha.
(See #26397.)

Note: See TracTickets for help on using tickets.