Making WordPress.org

Opened 6 months ago

Last modified 2 months ago

#5709 new defect

WordPress.org redirects to the http:// version of Gravatar, rather than https://

Reported by: carike Owned by:
Milestone: Priority: normal
Component: General Keywords:


How to replicate:
Hover over your profile picture in the top right corner of the toolbar on make.wordpress.org/core (or other). A preview with a link to your Gravatar profile will appear.
If you click on "View on Gravatar", you will be redirected to an http:// version of your profile.

Desired behaviour:
This should redirect to https:// instead.

Change History (2)

#1 @Otto42
6 months ago

That comes from hovercards, I think, which is in Jetpack.

#2 @dd32
6 months ago

I can't trigger the gravatar hovercards myself, and I know they're disabled in a lot of places, but I've checked and this isn't coming from the dotorg site, it's most likely present in the Gravatar JS: https://secure.gravatar.com/js/gprofiles.js?ver=202116:formatted

Note: See TracTickets for help on using tickets.