{"action":"created","issue":{"url":"https://api.github.com/repos/pkp/pkp-lib/issues/1507","repository_url":"https://api.github.com/repos/pkp/pkp-lib","labels_url":"https://api.github.com/repos/pkp/pkp-lib/issues/1507/labels{/name}","comments_url":"https://api.github.com/repos/pkp/pkp-lib/issues/1507/comments","events_url":"https://api.github.com/repos/pkp/pkp-lib/issues/1507/events","html_url":"https://github.com/pkp/pkp-lib/issues/1507","id":158231795,"number":1507,"title":"RECAPTCHA breaks on SSL if SSL is optional","user":{"login":"ctgraham","id":7001322,"avatar_url":"https://avatars.githubusercontent.com/u/7001322?v=3","gravatar_id":"","url":"https://api.github.com/users/ctgraham","html_url":"https://github.com/ctgraham","followers_url":"https://api.github.com/users/ctgraham/followers","following_url":"https://api.github.com/users/ctgraham/following{/other_user}","gists_url":"https://api.github.com/users/ctgraham/gists{/gist_id}","starred_url":"https://api.github.com/users/ctgraham/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ctgraham/subscriptions","organizations_url":"https://api.github.com/users/ctgraham/orgs","repos_url":"https://api.github.com/users/ctgraham/repos","events_url":"https://api.github.com/users/ctgraham/events{/privacy}","received_events_url":"https://api.github.com/users/ctgraham/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/pkp/pkp-lib/labels/Open%20Journal%20Systems","name":"Open Journal Systems","color":"aabbaa"}],"state":"closed","locked":false,"assignee":null,"milestone":{"url":"https://api.github.com/repos/pkp/pkp-lib/milestones/18","html_url":"https://github.com/pkp/pkp-lib/milestones/OJS%202.4.9","labels_url":"https://api.github.com/repos/pkp/pkp-lib/milestones/18/labels","id":1503460,"number":18,"title":"OJS 2.4.9","description":"","creator":{"login":"asmecher","id":200411,"avatar_url":"https://avatars.githubusercontent.com/u/200411?v=3","gravatar_id":"","url":"https://api.github.com/users/asmecher","html_url":"https://github.com/asmecher","followers_url":"https://api.github.com/users/asmecher/followers","following_url":"https://api.github.com/users/asmecher/following{/other_user}","gists_url":"https://api.github.com/users/asmecher/gists{/gist_id}","starred_url":"https://api.github.com/users/asmecher/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/asmecher/subscriptions","organizations_url":"https://api.github.com/users/asmecher/orgs","repos_url":"https://api.github.com/users/asmecher/repos","events_url":"https://api.github.com/users/asmecher/events{/privacy}","received_events_url":"https://api.github.com/users/asmecher/received_events","type":"User","site_admin":false},"open_issues":35,"closed_issues":11,"state":"open","created_at":"2016-01-12T23:57:39Z","updated_at":"2016-06-15T16:01:49Z","due_on":null,"closed_at":null},"comments":3,"created_at":"2016-06-02T20:26:48Z","updated_at":"2016-06-22T15:04:42Z","closed_at":"2016-06-15T16:01:49Z","body":"In OJS 2.x, if a site is viewed over HTTPS, but config.inc.php's `force_ssl` is unset, RECAPTCHA is served over HTTP instead of HTTPS, and any sane browser will block the component, making validation impossible.\r\n\r\nSee:\r\nhttps://github.com/pkp/ojs/blob/397061d442f66cd788f4b1d50b16be000e769a0c/classes/user/form/RegistrationForm.inc.php#L114-L115\r\nand\r\nhttps://github.com/pkp/ojs/blob/dbe779f2bd97e9a0f2842c4357fb56496b7179e4/classes/comment/form/CommentForm.inc.php#L131-L132\r\nand\r\nhttps://github.com/pkp/pkp-lib/blob/a39b1328db9ec06d2902e67b337dc5a63c60a496/classes/notification/form/NotificationMailingListForm.inc.php#L76-L77\r\n\r\nThis check should not be based on `Config::getVar('security', 'force_ssl')`, but on whether or not the Request itself is HTTPS."},"comment":{"url":"https://api.github.com/repos/pkp/pkp-lib/issues/comments/227773330","html_url":"https://github.com/pkp/pkp-lib/issues/1507#issuecomment-227773330","issue_url":"https://api.github.com/repos/pkp/pkp-lib/issues/1507","id":227773330,"user":{"login":"ctgraham","id":7001322,"avatar_url":"https://avatars.githubusercontent.com/u/7001322?v=3","gravatar_id":"","url":"https://api.github.com/users/ctgraham","html_url":"https://github.com/ctgraham","followers_url":"https://api.github.com/users/ctgraham/followers","following_url":"https://api.github.com/users/ctgraham/following{/other_user}","gists_url":"https://api.github.com/users/ctgraham/gists{/gist_id}","starred_url":"https://api.github.com/users/ctgraham/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ctgraham/subscriptions","organizations_url":"https://api.github.com/users/ctgraham/orgs","repos_url":"https://api.github.com/users/ctgraham/repos","events_url":"https://api.github.com/users/ctgraham/events{/privacy}","received_events_url":"https://api.github.com/users/ctgraham/received_events","type":"User","site_admin":false},"created_at":"2016-06-22T15:04:42Z","updated_at":"2016-06-22T15:04:42Z","body":"Can this be cherry-picked to stable-2_4_8 for 2.4.8-1?"}}
{"actor":{"display_login":"ctgraham"}}