Skip to main content
WordPress Development

Return to Question

deleted 18 characters in body; edited tags
Source Link
Nicolai Grossherr
Nicolai Grossherr
  • 18.9k
  • 8
  • 64
  • 109

I've searched here and the WP Codex but haven't found anything.

I have recently added an SSL Cert to a client site. The front end is fine and there are no insecure elements.

However, the admin dashboard has lots of insecure elements. A simple search shows that there are about 20 files in both wp-adminwp-admin and wp-includeswp-includes that have the following link hard coded: http://www.w3.org/1999/xhtml

There is no switch, as when using this config: define('FORCE_SSL_ADMIN', true); define('FORCE_SSL_ADMIN', true);

I understand what this link is, and why it is needed. But I do not want to edit the core to force Admin to be secure.

Does anyone have any suggestions how I fix this?

Many thanks

David

I've searched here and the WP Codex but haven't found anything.

I have recently added an SSL Cert to a client site. The front end is fine and there are no insecure elements.

However, the admin dashboard has lots of insecure elements. A simple search shows that there are about 20 files in both wp-admin and wp-includes that have the following link hard coded: http://www.w3.org/1999/xhtml

There is no switch, as when using this config: define('FORCE_SSL_ADMIN', true);

I understand what this link is, and why it is needed. But I do not want to edit the core to force Admin to be secure.

Does anyone have any suggestions how I fix this?

Many thanks

David

I've searched here and the WP Codex but haven't found anything.

I have recently added an SSL Cert to a client site. The front end is fine and there are no insecure elements.

However, the admin dashboard has lots of insecure elements. A simple search shows that there are about 20 files in both wp-admin and wp-includes that have the following link hard coded: http://www.w3.org/1999/xhtml

There is no switch, as when using this config: define('FORCE_SSL_ADMIN', true);

I understand what this link is, and why it is needed. But I do not want to edit the core to force Admin to be secure.

Does anyone have any suggestions how I fix this?

Source Link
Mr_DW_Brighton
Mr_DW_Brighton
  • 23
  • 5

WP Core hard coded to use http://www.w3.org/1999/xhtml not HTTPS

I've searched here and the WP Codex but haven't found anything.

I have recently added an SSL Cert to a client site. The front end is fine and there are no insecure elements.

However, the admin dashboard has lots of insecure elements. A simple search shows that there are about 20 files in both wp-admin and wp-includes that have the following link hard coded: http://www.w3.org/1999/xhtml

There is no switch, as when using this config: define('FORCE_SSL_ADMIN', true);

I understand what this link is, and why it is needed. But I do not want to edit the core to force Admin to be secure.

Does anyone have any suggestions how I fix this?

Many thanks

David