# HG changeset patch # User Sascha L. Teichmann # Date 1535989676 -7200 # Node ID b3baa2a98f556a1423dd418d3446554a22e23e4d # Parent 009171c1485ca06aa8ce902d53a1ecfb8678b0e8 Alway use HTTPs URL for password reset. diff -r 009171c1485c -r b3baa2a98f55 pkg/controllers/pwreset.go --- a/pkg/controllers/pwreset.go Mon Sep 03 17:24:50 2018 +0200 +++ b/pkg/controllers/pwreset.go Mon Sep 03 17:47:56 2018 +0200 @@ -158,10 +158,14 @@ } func useHTTPS(req *http.Request) string { - if strings.ToLower(req.URL.Scheme) == "https" { - return "https" - } - return "http" + // always use HTTPS for URLs. + return "https" + /* + if strings.ToLower(req.URL.Scheme) == "https" { + return "https" + } + return "http" + */ } func generateHash() string {