From feaf8ed0cbc8f1188c2ac2fe5206aa53e0491c82 Mon Sep 17 00:00:00 2001 From: crazyscience Date: Thu, 12 Sep 2013 10:34:48 -0700 Subject: [PATCH] Removed 'widget_text' from array of force_ssl filtered objects. Forcing SSL for all content in the text widget prevents adding links third party sites that do not support SSL. (ie. Partner sites). Furthermore, it's the assumed responsibility of the individual entering HTML into the text widget to ensure site security when referencing to outside sites. --- includes/class-wc-https.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/includes/class-wc-https.php b/includes/class-wc-https.php index 0135742981b..376ca6663f1 100644 --- a/includes/class-wc-https.php +++ b/includes/class-wc-https.php @@ -20,7 +20,7 @@ class WC_HTTPS { if ( get_option( 'woocommerce_force_ssl_checkout' ) == 'yes' ) { if ( ! is_admin() || defined('DOING_AJAX') ) { // HTTPS urls with SSL on - $filters = array( 'post_thumbnail_html', 'widget_text', 'wp_get_attachment_url', 'wp_get_attachment_image_attributes', 'wp_get_attachment_url', 'option_stylesheet_url', 'option_template_url', 'script_loader_src', 'style_loader_src', 'template_directory_uri', 'stylesheet_directory_uri', 'site_url' ); + $filters = array( 'post_thumbnail_html', 'wp_get_attachment_url', 'wp_get_attachment_image_attributes', 'wp_get_attachment_url', 'option_stylesheet_url', 'option_template_url', 'script_loader_src', 'style_loader_src', 'template_directory_uri', 'stylesheet_directory_uri', 'site_url' ); foreach ( $filters as $filter ) add_filter( $filter, 'WC_HTTPS::force_https_url' ); @@ -98,4 +98,4 @@ class WC_HTTPS { } } -new WC_HTTPS(); \ No newline at end of file +new WC_HTTPS();