Page MenuHomePhabricator

D11799.diff
No OneTemporary

D11799.diff

diff --git a/src/applications/notification/client/PhabricatorNotificationClient.php b/src/applications/notification/client/PhabricatorNotificationClient.php
--- a/src/applications/notification/client/PhabricatorNotificationClient.php
+++ b/src/applications/notification/client/PhabricatorNotificationClient.php
@@ -10,6 +10,11 @@
->setPath('/status/')
->setQueryParam('instance', self::getInstance());
+ // We always use HTTP to connect to the server itself: it's simpler and
+ // there's no meaningful security benefit to securing this link today.
+ // Force the protocol to HTTP in case users have set it to something else.
+ $uri->setProtocol('http');
+
list($body) = id(new HTTPSFuture($uri))
->setTimeout(3)
->resolvex();

File Metadata

Mime Type
text/plain
Expires
Wed, Oct 30, 8:09 AM (3 w, 3 h ago)
Storage Engine
blob
Storage Format
Encrypted (AES-256-CBC)
Storage Handle
6739766
Default Alt Text
D11799.diff (775 B)

Event Timeline