Forms submit to HTTP instead of HTTPS when accessed over HTTPS

Description

When accessing DataBoss over HTTPS and then creating or editing an entity, the form action has an absolute URL of HTTP instead of HTTPS.

The interesting thing is that looking at the HTML source code of DataBoss on the Edit Record screen under HTTPS the form action is the only absolute URL using HTTP but every other of the 31 elements (menu links, button...etc) have the correct absolute URL with HTTPS. It's just a problem with the form action.

Brad Wood has identified the problem here
https://groups.google.com/a/ortussolutions.com/d/msg/databoss/hY0Z1l1IDLs/Fo-bUeWpBgAJ

HTML helper's "html.startForm()" method to create the form, and the HTML Helper defaults the SSL attribute to false (which is then passed into event.buildLink). This is preventing buildLink() from doing it's normal behavior of detecting the current URL's SSL status and matching it. The ultimate fix is actually in the HTML Helper so I put in this ticket for it: https://ortussolutions.atlassian.net/browse/COLDBOX-471

Gliffy Diagrams

Activity

Show:

Wesley Hampton September 1, 2015 at 8:25 PM

Pull Request to address issue in ColdBox core.

Fixed
Pinned fields
Click on the next to a field label to start pinning.

Details

Assignee

Reporter

Components

Fix versions

Affects versions

Priority

Sentry

Created August 26, 2015 at 7:52 PM
Updated September 20, 2018 at 5:51 PM
Resolved December 11, 2015 at 10:24 PM