From a6e64bfe9ebd5d8512b490f757a09cf848e18805 Mon Sep 17 00:00:00 2001 From: Galen Charlton Date: Thu, 26 Sep 2013 14:24:42 -0700 Subject: [PATCH] LP#1207281: require SSL when downloading offline patron list This patch builds on the previous one by forcing use of SSL for downloading the offline patron list. Signed-off-by: Galen Charlton Signed-off-by: Bill Erickson --- Open-ILS/examples/apache/eg_vhost.conf | 1 + Open-ILS/xul/staff_client/chrome/content/main/menu.js | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/Open-ILS/examples/apache/eg_vhost.conf b/Open-ILS/examples/apache/eg_vhost.conf index b43776741b..50e49860f0 100644 --- a/Open-ILS/examples/apache/eg_vhost.conf +++ b/Open-ILS/examples/apache/eg_vhost.conf @@ -455,6 +455,7 @@ RewriteRule .? - [E=locale:%{HTTP:Accept-Language}] require valid-user PerlSendHeader On allow from all + SSLRequireSSL # ---------------------------------------------------------------------------------- diff --git a/Open-ILS/xul/staff_client/chrome/content/main/menu.js b/Open-ILS/xul/staff_client/chrome/content/main/menu.js index de871cdc7a..d9db611430 100644 --- a/Open-ILS/xul/staff_client/chrome/content/main/menu.js +++ b/Open-ILS/xul/staff_client/chrome/content/main/menu.js @@ -1320,7 +1320,7 @@ main.menu.prototype = { function() { try { var x = new XMLHttpRequest(); - var url = 'http://' + XML_HTTP_SERVER + '/standalone/list.txt'; + var url = 'https://' + XML_HTTP_SERVER + '/standalone/list.txt'; x.open("GET",url,false); x.send(null); if (x.status == 200) { -- 2.43.2