Fix Insecure Gravatar Content

[MemoryX2]

I know there was a core- something for this, but can support manager be updated so that it uses https:// for gravatar rather than the insecure http?

 

/plugins/support_manager/views/default/admin_tickets_reply.pdt        on line 135 

 

plugins/support_manager/views/default/client_tickets_reply.pdt       on line 103 

 

Those lines in each file can be updated to https:// and then clients/admin  will no longer receive the insecure content 

[Michael]

I know there was a core- something for this, but can support manager be updated so that it uses https:// for gravatar rather than the insecure http?

 

/plugins/support_manager/views/default/admin_tickets_reply.pdt        on line 135 

 

plugins/support_manager/views/default/client_tickets_reply.pdt       on line 103 

 

Those lines in each file can be updated to https:// and then clients/admin  will no longer receive the insecure content 

Yeah Paul was talking about making them like this:

 

<img src="//gravatar.com/avatar/<?php echo md5(strtolower(trim($this->Html->_($reply->email, true))));?>?s=120" />

[Paul]

CORE-596, it's still pending.

[cloudrck]

This is still present. Can't believe I didn't notice it until now. Easy fix

 

On both:

plugins/support_manager/views/default/client_tickets_reply.pdt

plugins/support_manager/views/default/admin_tickets_reply.pdt

 

<div>
<img src="http://gravatar.com/avatar/<?php echo md5(strtolower(trim($this->Html->_($reply->email, true))));?>?s=120" />
</div>

Should be:

<div>
<img src="https://secure.gravatar.com/avatar/<?php echo md5(strtolower(trim($this->Html->_($reply->email, true))));?>?s=120" />
</div>

 

[Michael]

Probably will be defaulted to //gravatar.com in 3.1.x

[MemoryX2]

This is still present. Can't believe I didn't notice it until now. Easy fix

 

On both:

plugins/support_manager/views/default/client_tickets_reply.pdt

plugins/support_manager/views/default/admin_tickets_reply.pdt

 

<div>
<img src="http://gravatar.com/avatar/<?php echo md5(strtolower(trim($this->Html->_($reply->email, true))));?>?s=120" />
</div>

Should be:

<div>
<img src="https://secure.gravatar.com/avatar/<?php echo md5(strtolower(trim($this->Html->_($reply->email, true))));?>?s=120" />
</div>

 

 

Yeah, it's literally a 5 minute fix. I have been trying to do it on each update but I occasionally forget.

[Tyson]

Probably will be defaulted to //gravatar.com in 3.1.x

 

^This. In v3.1.0