重写规则导致“部分加密连接”在 Firefox 和铬合金

发布于 2024-12-27 23:27:51 字数 1699 浏览 3 评论 0原文

该问题基于问题 htaccess 重写规则：根据键入的 URL 将 http 重定向到 https 或将 https 重定向到 http（两种方式）。伟大的解决方案（感谢 Ulrich Palha）如下所示：

RewriteEngine on
RewriteBase /

#determine if page is supposed to be http
#if it has p=home or p=home1 or qqq=home in querystring
RewriteCond %{QUERY_STRING} (^|&)(p=home1?|qqq=home)(&|$) [NC,OR]
#or if query string is empty
RewriteCond %{QUERY_STRING} ^$
#set env var to 1
RewriteRule ^ - [E=IS_HTTP:1]


#all pages that are supposed to be http redirected if https
RewriteCond %{HTTPS} on
RewriteCond %{ENV:IS_HTTP} 1
RewriteRule ^ http://%{HTTP_HOST}%{REQUEST_URI} [R,L=301]

#all other pages are sent to https if not already so
RewriteCond %{HTTPS} off
RewriteCond %{ENV:IS_HTTP} !1
RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [R,L=301]

不幸的是，一旦我将此代码添加到 .htaccess 文件中，一切正常，但 https 开始看起来损坏，如果包含来自服务器的 css 或图片链接，尽管路径是相对的。

下面的页面 (https://www.example.com/?p=welcome)显示 SSL 连接断开时，FF 浏览器显示“您与此站点的连接仅部分加密”，

<head>
<title>ddd</title>
</head>
<body>
Hello
<img src="/gfx/stars/help.gif" alt="" /> 
</body>
</html>

为什么？

一旦我从页面中删除，FF 显示 https 正常，URL 栏为绿色（SSL 证书显示）。当我使用 Google Chrome 测试它时，出现同样的错误。

那么，有什么问题吗？路径是相对的。如果我添加也会发生同样的情况

<link rel="stylesheet" type="text/css" href="/css/mycss.css" />

原文

The question is based on the question htaccess rewriterule: redirect http to https or https to http (both ways) depending on URL typed. The great solution (thanks to Ulrich Palha) looks like this:

RewriteEngine on
RewriteBase /

#determine if page is supposed to be http
#if it has p=home or p=home1 or qqq=home in querystring
RewriteCond %{QUERY_STRING} (^|&)(p=home1?|qqq=home)(&|$) [NC,OR]
#or if query string is empty
RewriteCond %{QUERY_STRING} ^$
#set env var to 1
RewriteRule ^ - [E=IS_HTTP:1]


#all pages that are supposed to be http redirected if https
RewriteCond %{HTTPS} on
RewriteCond %{ENV:IS_HTTP} 1
RewriteRule ^ http://%{HTTP_HOST}%{REQUEST_URI} [R,L=301]

#all other pages are sent to https if not already so
RewriteCond %{HTTPS} off
RewriteCond %{ENV:IS_HTTP} !1
RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [R,L=301]

Unfortunately, once I add this code to .htaccess file, everything works fine, but https started look broken, if contains links to css or pictures from the server, although the paths are relative.

The page below (https://www.example.com/?p=welcome) displayed with a broken SSL connection, FF browser says "Your connection to this site is only partrially encrypted"

<head>
<title>ddd</title>
</head>
<body>
Hello
<img src="/gfx/stars/help.gif" alt="" /> 
</body>
</html>

Why?

Once I remove <img src="/gfx/stars/help.gif" alt="" /> from the page , FF displays https fine, the URL bar is green then (SSL certificate is displayed). The same error appears, when I test it using Google Chrome.

So, what's wrong with <img src="/gfx/stars/help.gif" alt="" />? The path is relative.
The same happens if I add

<link rel="stylesheet" type="text/css" href="/css/mycss.css" />

分享到QQ

分享到微博

如果你对这篇内容有疑问，欢迎到本站社区发帖提问参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。

发布评论

需要登录才能够评论，你可以免费注册一个本站的账号。

笔落惊风雨 2025-01-03 23:27:51

页面加载后，浏览器开始通过 https 请求图像等。根据我对您的重写规则的阅读，因为图像的路径没有将查询字符串 IS_HTTP 设置为 1。这会导致您的重写规则重定向到图像 URL 的 http 版本，这就是浏览器抱怨的原因

回复收藏 0 原文

假装不在乎 2025-01-03 23:27:51

解决此问题的一种方法是避免处理资源（因为无论如何您都没有针对它们的任何特殊规则），如下所示

RewriteEngine on
RewriteBase /

#if its a resource (add others that are missing)
RewriteCond %{REQUEST_URI} \.(gif|css|png|js|jpe?g)$ [NC]
#do nothing
RewriteRule ^ - [L]

#rest of existing rules go here

One way to fix this is to avoid processing resources (since you don't have any special rules for them anyway) as follows

RewriteEngine on
RewriteBase /

#if its a resource (add others that are missing)
RewriteCond %{REQUEST_URI} \.(gif|css|png|js|jpe?g)$ [NC]
#do nothing
RewriteRule ^ - [L]

#rest of existing rules go here

回复收藏 0 原文

~没有更多了~