presscustomizr/hueman

<link rel="profile" href="http://gmpg.org/xfn/11" /> should be made ssl compliant

Closed this issue · 4 comments

Deleted user commented

Reported here : https://secure.helpscout.net/conversation/701721413/165982/

Solution : use set_url_scheme()

there is in html-header a link to profile gmpg.org

I deleted it, cause the link wasn't https

so please change the link to https or remove this profile-tag. Or add an option, to remove it in wp-admin.

thanks from Switzerland

eri-trabiccolo commented

Ah,
for Customizr too.

Though that doesn't bring to any ssl warnin.

Anyway we don't need the set_url_scheme() thing, as it doesn't depend on the secure protocol of the website where Hueman runs.
We just have to write it statically here:
https://github.com/presscustomizr/hueman/blob/dev/header.php#L6
as
<link rel="profile" href="https://gmpg.org/xfn/11">

no need to use the esc_url either IMHO

Deleted user commented

ah yeah that's right, hard writing it is enough !

  • 👍1
Deleted user commented

I'm fixing it on both themes