Comments on: Same origin policy and a buggy WordPress plugin

By: rogerhub

rogerhub — Fri, 29 Nov 2013 10:42:00 +0000

Just checked the plugin code. It looks like an HTTPS url won’t be used unless the page itself is loaded using HTTPS. Are you sure that the plugin is performing the redirection? It could just be a web server configuration issue.

By: rogerhub

rogerhub — Fri, 29 Nov 2013 10:39:00 +0000

Is the script that generates the XML located in /wp-admin/? Resources that are loaded by the public site shouldn’t be following the admin SSL option anyway.

By: Yuki Kimura

Yuki Kimura — Mon, 25 Nov 2013 20:29:00 +0000

Hi Roger,
I’m having this exact problem with a different plugin, called WP-Juicebox which enables creation of photo galleries. It creates an XML file dynamically when you create your gallery, which if you have SSL enabled on wp-admin automatically forces it to https. So the gallery breaks if you try to view the page with http. How were you able to hack your plugin code to use https? It seems to me that all http requests to the gallery post itself needs to be redirected to https, but I don’t know how to do that without hacking the WordPress core.
Thanks in advance.

By: Alvin Wan

Alvin Wan — Sun, 10 Mar 2013 08:43:00 +0000

interesting post – never knew about the crayon plugin and will definitely start using it