Many modules, such as Panels and Media, use custom AJAX callbacks for various purposes. If the option to "switch back to http pages when there are no matches" is enabled, and you haven't added all of these callbacks to the list of secure pages, they will die silently and without explanation.

For instance:

  1. Enable the Media browser for a file or content type, and configure admin pages to use SSL and switch to HTTP for non-admin pages.
  2. Go to add a node or file.
  3. Click the 'select' button to launch the media browser. You'll simply get a blank white modal, with no error messages. This is because securepages is trying to force the callback to use http.

I think a bit of documentation is a good fix to start- just a simple warning below the option to switch back.

CommentFileSizeAuthor
#1 securepages-2237845-1.patch637 bytesdanepowell

Comments

danepowell’s picture

danepowell commented
Issue summary: View changes
Status: Active » Needs review
StatusFileSize
new securepages-2237845-1.patch637 bytes

Attached patch adds a warning.

damienmckenna’s picture

damienmckenna
Location TN, USA
commented

One site I maintain also has problems hitting an infinite loop on the front page when this option is enabled.

astonvictor’s picture

astonvictor commented
Status: Needs review » Closed (outdated)

D7 reached its EOL back in January 2025, and there is no active release for D7 for this module anymore.
Development or support is not planned for D7. All D7-related issues are marked as outdated in a bunch.

Now that this issue is closed, please review the contribution record.

As a contributor, attribute any organization that helped you, or if you volunteered your own time.

Maintainers, please credit people who helped resolve this issue.