View Issue Details

IDProjectCategoryView StatusLast Update
0006567OXID eShop (all versions)4.04. Securitypublic2016-12-23 12:35
Reporterbecommerce Assigned To 
PrioritynormalSeverityminorReproducibilityalways
Status closedResolutionunable to reproduce 
Product Version4.10.2 / 5.3.2 
Summary0006567: When in ssl-mode(https) forms, linking to products with variants, point to http
DescriptionWhen using https on start-page Chrome-browser shows following warning, saying that site is not secure:

Mixed Content: The page at 'https://demoshop.oxid-esales.com/professional-edition/' was loaded over a secure connection, but contains a form which targets an insecure endpoint 'http://demoshop.oxid-esales.com/professional-edition/Bekleidung/Fashion/Fue…e/Jeans/Kuyichi-Jeans-ANNA.html?force_sid=c8a639cdc5c9bbffc8e07909eeb3385f'. This endpoint should be made available over a secure connection.
Steps To ReproduceViisible on demo shop "Kuyichi Jeans ANNA"

Reproduceable by using SSL when there are products with variants visible
TagsNo tags attached.
ThemeNot defined
BrowserNot defined
PHP VersionNot defined
Database VersionNot defined

Activities

QA

2016-12-23 12:35

administrator   ~0011903

I tested with Crome but did not get a warning "was loaded over a secure connection, but contains a form which targets an insecure endpoint ".