Results 1 to 3 of 3
  1. #1
    trial user
    Join Date
    September 7th, 2013
    Posts
    10

    Broken SSL on forum pages

    Hello there, on the forums there are plenty of areas where SSL is broken (such as showthread pages & forumdisplay (not forum home page but rather where the threadlists are). Here's a breakdown of why that is.

    https://www.whynopadlock.com/results...0-cc229153c23c

    Just browse on down to Mixed Content - Errors

    A quick fix is to insert this into vbulletin's headinclude template for your style.

    Code:
    <meta http-equiv="Content-Security-Policy" content="upgrade-insecure-requests">
    Quote Originally Posted by https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/upgrade-insecure-requests
    The HTTP Content-Security-Policy (CSP) upgrade-insecure-requests directive instructs user agents to treat all of a site's insecure URLs (those served over HTTP) as though they have been replaced with secure URLs (those served over HTTPS). This directive is intended for web sites with large numbers of insecure legacy URLs that need to be rewritten.

    The upgrade-insecure-requests directive will not ensure that users visiting your site via links on third-party sites will be upgraded to HTTPS for the top-level navigation and thus does not replace the Strict-Transport-Security (HSTS) header, which should still be set with an appropriate max-age to ensure that users are not subject to SSL stripping attacks.
    Last edited by vgchat; July 10th, 2019 at 08:17 PM.

  2. #2
    Administrator ZG Support 1's Avatar
    Join Date
    October 24th, 2008
    Posts
    13,837
    The forums are very old and we are planning to give them a major overhaul which should also address this.
    Become a Fan of Zygor Guides on Facebook:
    http://www.facebook.com/pages/Zygor-...04933799556988

    Follow Zygor Guides on Twitter:
    http://twitter.com/zygorguides

  3. #3

    Join Date
    October 27th, 2009
    Posts
    188
    Quote Originally Posted by ZG Support 1 View Post
    The forums are very old and we are planning to give them a major overhaul which should also address this.
    vbulletin 5 is finally mature and should be an easy upgrade https://www.vbulletin.com/en/upgrade/

    (Current Version 5.4.2)

    https://forum.vbulletin.com/forum/vb...-now-available

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •