[openstreetmap/openstreetmap-website] Use https:// for server_url (#1340)

Till Maas notifications at github.com
Wed Oct 26 12:47:49 UTC 2016


The server URL is used to generate links in password recovery e-mails.
This should happen via HTTPS not plain HTTP to prevent
man-in-the-middle attacks.

There are a lot of other places that hardcode http:// instead of https:// for several URLs. If you do not mind changing the links to https, I can create a follow-up patch to address the other instances. Also I guess that the actual config file in production needs to be adjusted to actually use this change.
You can view, comment on, or merge this pull request online at:

  https://github.com/openstreetmap/openstreetmap-website/pull/1340

-- Commit Summary --

  * Use https:// for server_url

-- File Changes --

    M config/example.application.yml (2)

-- Patch Links --

https://github.com/openstreetmap/openstreetmap-website/pull/1340.patch
https://github.com/openstreetmap/openstreetmap-website/pull/1340.diff

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/pull/1340
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20161026/ce0a1de8/attachment.html>


More information about the rails-dev mailing list