Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-67460

User Profile ICQ number and Yahoo ID use HTTP link instead of HTTPS

    XMLWordPrintable

    Details

      Description

      When an ICQ number or a Yahoo ID is provided for a user, a non-secure link is added to the user's profile page.  The target site for each link has an SSL certificate, so these links should be generated using HTTPS rather than HTTP.

      REPLICATION STEPS

      1. Create a new user or edit an existing user.
      2. In the optional section, enter values in the ICQ number and Yahoo ID fields.  Valid values are not necessary, anything will do to demonstrate the issue.
      3. View the user's profile (/user/profile.php?id=xxxx).
      4. Use the browser's developer tools to inspect the ICQ number and Yahoo ID links.

      OBSERVED BEHAVIOR:
      Both links are HTTP
      <a href="http://web.icq.com/wwp?uin=123456789">
      <a href="http://edit.yahoo.com/config/send_webmsg?.target=bluejello&.src=pg"

      EXPECTED BEHAVIOR:
      Both links are HTTPS
      <a href="https://web.icq.com/wwp?uin=123456789">
      <a href="https://edit.yahoo.com/config/send_webmsg?.target=bluejello&.src=pg"

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              simonmok_beenet Simon Mok
              Reporter:
              brian.winstead Brian Winstead
              Peer reviewer:
              Sara Arjona (@sarjona) Sara Arjona (@sarjona)
              Integrator:
              Jake Dallimore Jake Dallimore
              Tester:
              Janelle Barcega Janelle Barcega
              Participants:
              Component watchers:
              Amaia Anabitarte, Carlos Escobedo, Ferran Recio, Ilya Tregubov, Sara Arjona (@sarjona)
              Votes:
              17 Vote for this issue
              Watchers:
              11 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:
                Fix Release Date:
                18/Jan/21

                  Time Tracking

                  Estimated:
                  Original Estimate - 0 minutes
                  0m
                  Remaining:
                  Remaining Estimate - 0 minutes
                  0m
                  Logged:
                  Time Spent - 1 hour, 1 minute
                  1h 1m