Bug 221799

Summary:	https://bugs.gentoo.org/NUMBER redirects to http://bugs.gentoo.org/show_bug.cgi?id=NUMBER
Product:	Gentoo Infrastructure	Reporter:	Arfrever Frehtes Taifersar Arahesis (RETIRED) <arfrever>
Component:	Bugzilla	Assignee:	Bugzilla Admins <bugzilla>
Status:	RESOLVED FIXED
Severity:	major	CC:	jer
Priority:	Highest	Keywords:	REGRESSION
Version:	unspecified
Hardware:	All
OS:	All
Whiteboard:
Package list:		Runtime testing required:	---
Bug Depends on:
Bug Blocks:	220283

Description Arfrever Frehtes Taifersar Arahesis (RETIRED) gentoo-dev

2008-05-12 09:22:26 UTC

https://bugs.gentoo.org/NUMBER redirects to http://bugs.gentoo.org/show_bug.cgi?id=NUMBER, instead of https://bugs.gentoo.org/show_bug.cgi?id=NUMBER (https vs. http).

Before recent Bugzilla changes this redirection was working correctly.

Comment 1 Harald van Dijk (RETIRED) gentoo-dev

2008-05-19 05:04:55 UTC

*** Bug 222753 has been marked as a duplicate of this bug. ***

Comment 2 Jeroen Roovers (RETIRED) gentoo-dev

2008-05-19 05:13:08 UTC

I wouldn't say this is a minor bug at all. If you can only access bugzilla over an untrusted network (one where people could be using sniffers) then this could lead to involuntary data disclosure unless you also take care to have your web browser warn when you leave a secure connection, a setting not many people use.

Comment 3 Robin Johnson archtester

2008-05-22 17:58:37 UTC

Fixed in cfengine, will take effect in 20 minutes.