<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="padding-bottom: 10px; padding-top: 5px;">
<div style="padding:12px; border:1px solid #8D3970; background-color:#F7F9FA; color:#8D3970; font-size:14px; line-height:22px; font-family: Calibri, Arial, Helvetica, sans-serif;">
<strong>CAUTION:</strong> This e-mail originated outside the University of Southampton.
</div>
</div>
<div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Hi David,</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Thank you.&nbsp; I have also opened a similar issue based on yours in DataCiteDOI on IRStats2:</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<a href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Feprints%2Firstats2%2Fissues%2F100&amp;data=04%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7Cbb9562c58bb9407fb3be08d9d214fb66%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637771810845158082%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&amp;sdata=yDP8nJai%2Ba4BruQNT0BeYdUQpliPYIMpiHL28b8ZiCE%3D&amp;reserved=0" originalSrc="https://github.com/eprints/irstats2/issues/100" shash="N1w4/iAzKVtNTMkLpB0DIxiUbDselXKkYSfNgDBl/vL9+QKzSyC4Y/W/a6mF2vDpN+xlFH9tjBxO3EihQi9ynr64yND6PwO2FjgHrjm/nBygX1X7MMqQCINE4TMBBKo8hyqLGX/eLf2lD5xq7EN7CbvjIAfYDQwg/9Rk/GySkRw=" id="LPNoLPOWALinkPreview">https://github.com/eprints/irstats2/issues/100</a></div>
<div class="_Entity _EType_OWALinkPreview _EId_OWALinkPreview _EReadonly_1"></div>
<br>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Would something like this work as a patch [i.e., can we rely on a $self-&gt;{session}-&gt;config (&quot;securehost&quot;) just like a $c-&gt;{securehost} ]?</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<span class="pl-smi" style="box-sizing:border-box;color:rgb(36, 41, 47);font-family:ui-monospace, SFMono-Regular, &quot;SF Mono&quot;, Menlo, Consolas, &quot;Liberation Mono&quot;, monospace;font-size:12px">$self</span><span class="pl-k" style="box-sizing:border-box;color:var(--color-prettylights-syntax-keyword);font-family:ui-monospace, SFMono-Regular, &quot;SF Mono&quot;, Menlo, Consolas, &quot;Liberation Mono&quot;, monospace;font-size:12px">-&gt;</span><span style="color:rgb(36, 41, 47);font-family:ui-monospace, SFMono-Regular, &quot;SF Mono&quot;, Menlo, Consolas, &quot;Liberation Mono&quot;, monospace;font-size:12px;background-color:rgb(255, 248, 197);display:inline !important">{</span><span class="pl-c1" style="box-sizing:border-box;color:var(--color-prettylights-syntax-constant);font-family:ui-monospace, SFMono-Regular, &quot;SF Mono&quot;, Menlo, Consolas, &quot;Liberation Mono&quot;, monospace;font-size:12px">host</span><span style="color:rgb(36, 41, 47);font-family:ui-monospace, SFMono-Regular, &quot;SF Mono&quot;, Menlo, Consolas, &quot;Liberation Mono&quot;, monospace;font-size:12px;background-color:rgb(255, 248, 197);display:inline !important">}
 =&nbsp;<span style="font-size:11.9px;background-color:rgba(175, 184, 193, 0.2);display:inline !important">defined
<span class="pl-smi" style="margin:0px;font-size:12px;background-color:rgb(255, 255, 255);box-sizing:border-box">
$self</span><span class="pl-k" style="margin:0px;font-size:12px;color:var(--color-prettylights-syntax-keyword);background-color:rgb(255, 255, 255);box-sizing:border-box">-&gt;</span><span style="margin:0px;font-size:12px;background-color:rgb(255, 248, 197);display:inline !important">{</span><span class="pl-c1" style="margin:0px;font-size:12px;color:var(--color-prettylights-syntax-constant);background-color:rgb(255, 255, 255);box-sizing:border-box">session</span><span style="margin:0px;font-size:12px;background-color:rgb(255, 248, 197);display:inline !important">}</span><span class="pl-k" style="margin:0px;font-size:12px;color:var(--color-prettylights-syntax-keyword);background-color:rgb(255, 255, 255);box-sizing:border-box">-&gt;</span><span style="margin:0px;font-size:12px;background-color:rgb(255, 248, 197);display:inline !important">config(<span>&nbsp;</span></span><span class="pl-s" style="margin:0px;font-size:12px;color:var(--color-prettylights-syntax-string);background-color:rgb(255, 255, 255);box-sizing:border-box"><span class="pl-pds" style="margin:0px;box-sizing:border-box">&quot;</span>host<span class="pl-pds" style="margin:0px;box-sizing:border-box">&quot;</span></span><span style="margin:0px;font-size:12px;background-color:rgb(255, 248, 197);display:inline !important">&nbsp;)</span>
 ?<span>&nbsp;</span></span>&nbsp;</span><span class="pl-smi" style="box-sizing:border-box;color:rgb(36, 41, 47);font-family:ui-monospace, SFMono-Regular, &quot;SF Mono&quot;, Menlo, Consolas, &quot;Liberation Mono&quot;, monospace;font-size:12px">$self</span><span class="pl-k" style="box-sizing:border-box;color:var(--color-prettylights-syntax-keyword);font-family:ui-monospace, SFMono-Regular, &quot;SF Mono&quot;, Menlo, Consolas, &quot;Liberation Mono&quot;, monospace;font-size:12px">-&gt;</span><span style="color:rgb(36, 41, 47);font-family:ui-monospace, SFMono-Regular, &quot;SF Mono&quot;, Menlo, Consolas, &quot;Liberation Mono&quot;, monospace;font-size:12px;background-color:rgb(255, 248, 197);display:inline !important">{</span><span class="pl-c1" style="box-sizing:border-box;color:var(--color-prettylights-syntax-constant);font-family:ui-monospace, SFMono-Regular, &quot;SF Mono&quot;, Menlo, Consolas, &quot;Liberation Mono&quot;, monospace;font-size:12px">session</span><span style="color:rgb(36, 41, 47);font-family:ui-monospace, SFMono-Regular, &quot;SF Mono&quot;, Menlo, Consolas, &quot;Liberation Mono&quot;, monospace;font-size:12px;background-color:rgb(255, 248, 197);display:inline !important">}</span><span class="pl-k" style="box-sizing:border-box;color:var(--color-prettylights-syntax-keyword);font-family:ui-monospace, SFMono-Regular, &quot;SF Mono&quot;, Menlo, Consolas, &quot;Liberation Mono&quot;, monospace;font-size:12px">-&gt;</span><span style="color:rgb(36, 41, 47);font-family:ui-monospace, SFMono-Regular, &quot;SF Mono&quot;, Menlo, Consolas, &quot;Liberation Mono&quot;, monospace;font-size:12px;background-color:rgb(255, 248, 197);display:inline !important">config(
</span><span class="pl-s" style="box-sizing:border-box;color:var(--color-prettylights-syntax-string);font-family:ui-monospace, SFMono-Regular, &quot;SF Mono&quot;, Menlo, Consolas, &quot;Liberation Mono&quot;, monospace;font-size:12px"><span class="pl-pds" style="box-sizing:border-box">&quot;</span>host<span class="pl-pds" style="box-sizing:border-box">&quot;</span></span><span style="color:rgb(36, 41, 47);font-family:ui-monospace, SFMono-Regular, &quot;SF Mono&quot;, Menlo, Consolas, &quot;Liberation Mono&quot;, monospace;font-size:12px;background-color:rgb(255, 248, 197);display:inline !important">&nbsp;)
 :&nbsp;<span style="margin:0px;background-color:rgb(255, 248, 197);display:inline !important">&nbsp;</span><span class="pl-smi" style="margin:0px;background-color:rgb(255, 255, 255);box-sizing:border-box">$self</span><span class="pl-k" style="margin:0px;color:var(--color-prettylights-syntax-keyword);background-color:rgb(255, 255, 255);box-sizing:border-box">-&gt;</span><span style="margin:0px;background-color:rgb(255, 248, 197);display:inline !important">{</span><span class="pl-c1" style="margin:0px;color:var(--color-prettylights-syntax-constant);background-color:rgb(255, 255, 255);box-sizing:border-box">session</span><span style="margin:0px;background-color:rgb(255, 248, 197);display:inline !important">}</span><span class="pl-k" style="margin:0px;color:var(--color-prettylights-syntax-keyword);background-color:rgb(255, 255, 255);box-sizing:border-box">-&gt;</span><span style="margin:0px;background-color:rgb(255, 248, 197);display:inline !important">config(<span>&nbsp;</span></span><span class="pl-s" style="margin:0px;color:var(--color-prettylights-syntax-string);background-color:rgb(255, 255, 255);box-sizing:border-box"><span class="pl-pds" style="margin:0px;box-sizing:border-box">&quot;secure</span>host<span class="pl-pds" style="margin:0px;box-sizing:border-box">&quot;</span></span><span style="margin:0px;background-color:rgb(255, 248, 197);display:inline !important">&nbsp;);</span></span><br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Tomasz</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div id="Signature">
<div>
<div></div>
<div name="divtagdefaultwrapper" style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:; margin:0">
<div style="font-family:Tahoma; font-size:13px">
<p class="MsoNormal" style="margin:0cm 0cm 0.0001pt; font-size:11pt; font-family:Calibri,sans-serif; color:rgb(33,33,33); background:white">
<span lang="FR-CA" style="font-size:8pt; font-family:&quot;Courier New&quot;; color:rgb(166,166,166)">________________________________________________</span></p>
<p class="MsoNormal" style="margin:0cm 0cm 12pt 17.85pt; font-size:11pt; font-family:Calibri,sans-serif; color:rgb(33,33,33); background:white">
<span lang="FR-CA" style="font-size:9pt; font-family:Arial,sans-serif; color:black">Tomasz Neugebauer<span style=""><br>
</span><span style="background-color:rgb(255,255,255); display:inline!important">Senior Librarian | Bibliothécaire titulaire
</span><span style="margin:0px; background-color:rgb(255,255,255)"><br>
</span>Digital Projects &amp; Systems Development Librarian / Bibliothécaire des Projets Numériques &amp; Développement de Systèmes<br>
Concordia University / Université Concordia</span></p>
<p class="MsoNormal" style="margin:0cm 0cm 12pt 17.85pt; font-size:11pt; font-family:Calibri,sans-serif; color:rgb(33,33,33); background:white">
<span lang="FR-CA" style="font-size:9pt; font-family:Arial,sans-serif; color:black">Tel. / Tél. 514-848-2424 ext. / poste 7738<br>
Email / courriel:&nbsp;</span><a tabindex="0" href="mailto:tomasz.neugebauer@concordia.ca" target="_blank"><span lang="FR-CA" style="font-size:9pt; font-family:Arial,sans-serif; color:blue">tomasz.neugebauer@concordia.ca</span></a><span style="font-size:9pt; font-family:Arial,sans-serif; color:black"></span></p>
<p class="MsoNormal" style="margin:0cm 0cm 12pt 17.85pt; font-size:11pt; font-family:Calibri,sans-serif; color:rgb(33,33,33); background:white">
<span lang="FR-CA" style="font-size:9pt; font-family:Arial,sans-serif; color:black">Mailing address / adresse postale:&nbsp;1455 De Maisonneuve Blvd. W.,&nbsp;LB-540-03, Montreal, Quebec H3G 1M8<br>
Street address / adresse municipale: 1400&nbsp;De Maisonneuve Blvd. W.,&nbsp;LB-540-03, Montreal, Quebec H3G 1M8</span></p>
<p class="MsoNormal" style="margin:0cm 0cm 12pt 17.85pt; font-size:11pt; font-family:Calibri,sans-serif; color:rgb(33,33,33); background:white">
<span class="MsoHyperlink" style="color:rgb(5,99,193); text-decoration:underline"><span lang="IT" style="font-size:9pt; font-family:Arial,sans-serif; color:purple">library.concordia.ca</span></span></p>
</div>
</div>
</div>
</div>
</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> David R Newman &lt;drn@ecs.soton.ac.uk&gt;<br>
<b>Sent:</b> Friday, January 7, 2022 10:39 AM<br>
<b>To:</b> Tomasz Neugebauer &lt;Tomasz.Neugebauer@concordia.ca&gt;; eprints-tech@ecs.soton.ac.uk &lt;eprints-tech@ecs.soton.ac.uk&gt;<br>
<b>Subject:</b> Re: [EP-tech] mixed-content warnings</font>
<div>&nbsp;</div>
</div>
<div>
<p><span style="font-weight:bold; color:rgb(156,0,0)">Attention</span> This email originates from outside the concordia.ca domain. // Ce courriel provient de l'exterieur du domaine de concordia.ca</p>
<p><br>
</p>
<div><br>
</div>
<p>Hi Tomasz,</p>
<p><br>
</p>
<p>Yes, that one will affect registering the referrer correctly in stats generation to log it as an internal referrer, so that could do with updating.&nbsp; I am not currently responsible for maintaining the IRStats2 Bazaar plugin.&nbsp; I will speak to my colleagues
 and other EPrints developers and see what can be done about maintaining this and making changes like the one required here.&nbsp; There are several different branches of development that I am aware of for IRStats2 and we really need to see if this can be more linked
 up.</p>
<p><br>
</p>
<p>Regards</p>
<p><br>
</p>
<p>David Newman<br>
</p>
<p><br>
</p>
<p><br>
</p>
<div class="x_moz-cite-prefix">On 07/01/2022 15:30, Tomasz Neugebauer wrote:<br>
</div>
<blockquote type="cite"><style type="text/css" style="display:none">
<!--
p
        {margin-top:0;
        margin-bottom:0}
-->
</style>
<div style="padding-bottom:10px; padding-top:5px">
<div style="padding:12px; border:1px solid #8D3970; background-color:#F7F9FA; color:#8D3970; font-size:14px; line-height:22px; font-family:Calibri,Arial,Helvetica,sans-serif">
<strong>CAUTION:</strong> This e-mail originated outside the University of Southampton.
</div>
</div>
<div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
Hi David,</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
Thank you, much appreciated.&nbsp;&nbsp;</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
About the IRStats2, I think maybe I was unclear, one of the references, the one in the config file, is indeed commented out by default, but this one is not:</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<a href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Feprints%2Firstats2%2Fblob%2Fmaster%2Flib%2Fplugins%2FEPrints%2FPlugin%2FStats%2FProcessor%2FAccess%2FReferrer.pm%23L24&amp;data=04%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7Cbb9562c58bb9407fb3be08d9d214fb66%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637771810845158082%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&amp;sdata=qvmB2Vb8ZX%2FrMun1pjzlM4N4a9TOeRU08C2cyUUL83o%3D&amp;reserved=0" originalSrc="https://github.com/eprints/irstats2/blob/master/lib/plugins/EPrints/Plugin/Stats/Processor/Access/Referrer.pm#L24" shash="Dkt6uvdcUrjA2JGX0EgivMj3G3yR04FDiYt7la8N5uga4zvUSNjUCDOasPL3GR4y3WiWapGxcRL7AYk17WPEb0SyWFrUHWFCnM+CYtVea68a8Sd2QlJlk2M9pu3/j17dQC0sBYzkLs/GSiNAm4TWkB6D2lToJYWTDpVY5BN+/IQ=" originalsrc="https://github.com/eprints/irstats2/blob/master/lib/plugins/EPrints/Plugin/Stats/Processor/Access/Referrer.pm#L24" shash="ugH0JzKWs4fMdvwHnB3PEmAChMtvOo9SrLp5GVPbYhOAkQk4zfgO2hU8G/TF23rqDnciA9sTLj9KHKUAnWyjmAUtef1MUL6GjQbe6VvWbS8S3fhDcWePEti0673cELLpNk4RAnBPlEofLKisXvZ3r+9FQ3HqiCG+I+Dyze9EEpg=" originalsrc="https://github.com/eprints/irstats2/blob/master/lib/plugins/EPrints/Plugin/Stats/Processor/Access/Referrer.pm#L24" shash="k2SW+aRQdqCyoa2Wq7hsiEAe+5s56eRUC2EKcKhG3QJVLvam9K2sxiU4/70Qs3rDfJVlhtfu+QJR+/SQtWGDI+peU6pU7W2/pGAAnh8cVbtcbHzHdAJe39zu0Y0jacYBZ5qJTcm0OVNJ2y4ENN1ANoYDOpZIUr9IY2+jyVP3YTY=" id="LPNoLPOWALinkPreview">https://github.com/eprints/irstats2/blob/master/lib/plugins/EPrints/Plugin/Stats/Processor/Access/Referrer.pm#L24</a><br>
</div>
<blockquote type="cite" style="font-size:14px; background-color:rgb(255,255,255)">
<blockquote type="cite">
<div style="margin:0px"><span style="margin:0px">$self-&gt;{host} = $self-&gt;{session}-&gt;config( &quot;host&quot; );</span></div>
</blockquote>
</blockquote>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
That is part of an initialization function, so don't know if having {host} undefined in the Referrer object on IRstats2 would break anything further along?</div>
<br>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
Best wishes,</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
Tomasz</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="x_divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> David R Newman
<a class="x_moz-txt-link-rfc2396E" href="mailto:drn@ecs.soton.ac.uk">&lt;drn@ecs.soton.ac.uk&gt;</a><br>
<b>Sent:</b> Friday, January 7, 2022 7:19 AM<br>
<b>To:</b> Tomasz Neugebauer <a class="x_moz-txt-link-rfc2396E" href="mailto:Tomasz.Neugebauer@concordia.ca">
&lt;Tomasz.Neugebauer@concordia.ca&gt;</a>; <a class="x_moz-txt-link-abbreviated" href="mailto:eprints-tech@ecs.soton.ac.uk">
eprints-tech@ecs.soton.ac.uk</a> <a class="x_moz-txt-link-rfc2396E" href="mailto:eprints-tech@ecs.soton.ac.uk">
&lt;eprints-tech@ecs.soton.ac.uk&gt;</a><br>
<b>Subject:</b> Re: [EP-tech] mixed-content warnings</font>
<div>&nbsp;</div>
</div>
<div>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px"><span style="font-weight:bold; color:rgb(156,0,0)">Attention</span> This email originates from outside the concordia.ca domain. // Ce courriel provient de l'exterieur du domaine
 de concordia.ca</p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px"><br>
</p>
<div><br>
</div>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px">Hi Tomasz,</p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px"><br>
</p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px">I have just been checking RFC 6265 which is about the HTTP State Management System (i.e. Cookies).&nbsp; Point 6 of section 5.3 (see link below) makes clear that if the domain attribute
 is not set then it is assumed to be the same as the current request:<br>
</p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px"><br>
</p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px"><a class="x_x_moz-txt-link-freetext" href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.rfc-editor.org%2Frfc%2Frfc6265%23section-5.3&amp;data=04%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7Cbb9562c58bb9407fb3be08d9d214fb66%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637771810845158082%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&amp;sdata=Ac%2B%2FE8sRS1yC9Dw1is2KajIDCNT6GU9bxFIw4HAdZG4%3D&amp;reserved=0" originalSrc="https://www.rfc-editor.org/rfc/rfc6265#section-5.3" shash="R9eJQUBdEfEKNbYH93oB3O6kdGqMMzn6Dtx+fWneHZQr8/zoRGLYkfW8mDgVCPAUExD2LaLHUGRUZIc0SEzEXfRxzg3YL3lx7ebFSrbphkIyYMMOKqaJcWk4eWuBuKAxSw2FYpk7mtDByHfittDQ/jEAFXsG7OM25fSIBCxpzvU=" originalsrc="https://www.rfc-editor.org/rfc/rfc6265#section-5.3" shash="kc2s7ACCPoqUnR8fzEDzwB6qX57vtqWklMpeT7YOuo60/anF70Jw5eKmbXnzulK4E0hc2diVnlqdVKbdranliB1yg8sX4x0YxvJW1CBhn4GoYzFqj3HohF3967FmsGK4KPua3iO/6isCeqFPAZun0DwluYQqQcB0ry7dL6CdPzc=" originalsrc="https://www.rfc-editor.org/rfc/rfc6265#section-5.3" shash="XS1fkOYPwfBhuK5Nnuye++hpZRlpE4U3hLWbVgIsXFwxQHEjHSSbpLRDzHX02g3QODA2+bjG6+1kkTRbIYA9pUtHOPR3BWa5LVtI1quSc9eQ8c+ad10F5fp26lNk75YsYqINz7gIoCtkFwdUqJGfEzArnSn/yz+85d8fSlZ/eLo=">https://www.rfc-editor.org/rfc/rfc6265#section-5.3</a></p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px"><br>
</p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px">Therefore, I cannot see any scenario where the domain not being set would create a security or functional problem, as there should be no need to share EPrints cookie data between
 domains, (e.g. multiple web sites at an institution).&nbsp; The only two cookies that EPrints deploys by default are for maintaing a logged in user's session and another for the language they have chosen if the repository is multi-language.&nbsp; Neither of these should
 need to be shared with other sites.&nbsp; Even if they did, the effective setting for domain in the cookie with be the same whether $c-&gt;{host} is defined or not.&nbsp; So the repository system administrator would have had to manually change the $c-&gt;{cookie_domain} setting
 to something other than the hostname of the repository, at which point the value for $c-&gt;{host} becomes inconsequential as it will no longer be playing a role in setting $c-&gt;{cookie_domain}.<br>
</p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px"><br>
</p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px">This does not mean that the commit I made last night is inappropriate, just that functionally it will make no difference.&nbsp; However, at some point in the future it may concern someone
 (like it did us, yesterday) that the value for $c-&gt;{cookie_domain} is not being set because $c-&gt;{host} is undefined (if a repository has been configured for HTTPS only).&nbsp; So fixing this now will avoid concern further down the line.</p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px"><br>
Regards</p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px"><br>
</p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px">David Newmam<br>
</p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px"><br>
</p>
<div class="x_x_moz-cite-prefix">On 07/01/2022 00:47, David R Newman wrote:<br>
</div>
<blockquote type="cite">
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px">Hi Tomasz,</p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px"><br>
</p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px">Thanks for doing that review.&nbsp; Point 2 (cookie_domain) is important to fix, although it does not appear to break anything from a user perspective, setting the domain on cookies
 is important.&nbsp; I have fixed this with the latest commit:</p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px"><br>
</p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px"><a class="x_x_moz-txt-link-freetext" href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Feprints%2Feprints3.4%2Fcommit%2Fbde3347551e0424fbbc166e52c9179b6e17b6704%23diff-5d51fb282bd5d973fb2de0a82e36cdfb465b9e69b2782c9c923f8a24aeaaad97&amp;data=04%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7Cbb9562c58bb9407fb3be08d9d214fb66%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637771810845158082%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&amp;sdata=pQuy4J3z6wOWbGAH55ltQI4PgyU3nSmWMKvK1JP3ouU%3D&amp;reserved=0" originalSrc="https://github.com/eprints/eprints3.4/commit/bde3347551e0424fbbc166e52c9179b6e17b6704#diff-5d51fb282bd5d973fb2de0a82e36cdfb465b9e69b2782c9c923f8a24aeaaad97" shash="UBU0CNk/msd2ITbv7R+acCc1fmTLiUeZajRRO/Pqvh5EprQdj7OyT1b1F7ZdTSRw0f1Hyf3qWf7e9AQ6zZVWE/2KIuV9zpsGtjwTZtVEJb2nnCF4j3N1cTl1kmc46S4OtYOffqfXMoNWlGSk+XA60H+RQjWRtsmTNUAPm3xO4OE=" originalsrc="https://github.com/eprints/eprints3.4/commit/bde3347551e0424fbbc166e52c9179b6e17b6704#diff-5d51fb282bd5d973fb2de0a82e36cdfb465b9e69b2782c9c923f8a24aeaaad97" shash="Hd7tbXUBx8KEOZ1U8yxuYQw7U4+zOq29l3O5Nlo6COiDIh1qlZAVVNJM4MI3vebllhYudBdaHIMsMliS+otMNiB0qRrPU3nVeSNz90gvt863gXpGyhS2WuoFG3717GeMRXvrGslfLxnVWC+S+awdtJTDOkGRnv2Dk6LUPCeL0As=" originalsrc="https://github.com/eprints/eprints3.4/commit/bde3347551e0424fbbc166e52c9179b6e17b6704#diff-5d51fb282bd5d973fb2de0a82e36cdfb465b9e69b2782c9c923f8a24aeaaad97" shash="yUCgaaUTeq9cY05m3TkwGSX4de8bfH0lyuaVHIuB+J9e9cZC2ZxbgBEA2QRhJC0PZjeQCK2/EsHFiqDwekARk764+/b9Naw3sofcPWAQdnsDODWgvb3toc3BOvTLa8cAtrhwZ3i8QyQrnuothTZWjdwCZmEhc1Rkxtx7r2jY8ww=">https://github.com/eprints/eprints3.4/commit/bde3347551e0424fbbc166e52c9179b6e17b6704#diff-5d51fb282bd5d973fb2de0a82e36cdfb465b9e69b2782c9c923f8a24aeaaad97</a><br>
</p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px"><br>
</p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px">I have added a GitHub&nbsp; issue for the DataCiteDOI plugin:</p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px"><br>
</p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px"><a class="x_x_moz-txt-link-freetext" href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Feprintsug%2FDataCiteDoi%2Fissues%2F52&amp;data=04%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7Cbb9562c58bb9407fb3be08d9d214fb66%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637771810845158082%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&amp;sdata=Be2kxET5ea%2BBAmC0LIHZgDQLwwHTtqM9jcPbZWMgJvI%3D&amp;reserved=0" originalSrc="https://github.com/eprintsug/DataCiteDoi/issues/52" shash="ShbQH1lwiTW6U/Wuqgc1ZiToHwaycHlgfJMm27REw3LjXmUVkeX5+S7oAQ11K1U1mBwO6aKW/50DhmGtvTCyDoGbpyRTnurSYm5nsu5i44osE26oXZ6Srlos1fU7mEo5VXNvfdc+BiJvPZ4bKggGkku8bDpuSOxsELb2IV5ycGk=" originalsrc="https://github.com/eprintsug/DataCiteDoi/issues/52" shash="WbKKAvdQToI/KyeQCotsxFIMZmJc+1lHfZuXAKW3Zx51RmJPKjmHRrgwG9xhIbIENhEd5uYnmN+HaTSG+5ihkLmZ97DLkRNbBI8kbsOIA/zcKDZIDqkSqgmarWnFl5rpm/pkTuwD9RafyY0flnov0hjwYQEieTQU+9vJhMWt0GI=" originalsrc="https://github.com/eprintsug/DataCiteDoi/issues/52" shash="q9L7UPK90oDzNQ5LL360fuGC1DS8jq1u30vsANtl0AaBafPBI6UdmhjB3Q4Y9TdJlmvukj8Q5/vVjvFrW7HKoMxyiwhOcfxsAesHqBK2Okuj6oiu+a+J6cSuOQLg9apPlB+jVnAIGw+LtIjouvY4GfY/7a4ey8YIBqokRq3Oa1s=">https://github.com/eprintsug/DataCiteDoi/issues/52</a></p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px"><br>
</p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px">The IRStats2 issue is less of a problem, as the code is commented out by default, so if a someone uncomments this, they should spot this is not working and be able to deal with
 that issue immediately.&nbsp; Rather than not noticing this has broken after changing their configuration to enable HTTPS only.&nbsp; Like would be the case the the other two instances.<br>
</p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px"><br>
</p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px">Thanks and regards</p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px"><br>
</p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px">David Newman</p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px"><br>
</p>
<div class="x_x_moz-cite-prefix">On 06/01/2022 22:49, Tomasz Neugebauer wrote:<br>
</div>
<blockquote type="cite">
<div style="padding-bottom:10px; padding-top:5px">
<div style="padding:12px; border:1px solid #8D3970; background-color:#F7F9FA; color:#8D3970; font-size:14px; line-height:22px; font-family:Calibri,Arial,Helvetica,sans-serif">
<strong>CAUTION:</strong> This e-mail originated outside the University of Southampton.
</div>
</div>
<div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
I did some grep on our configuration files, and found the following instances:</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<ol>
<li><span>DataCite DOI Minting</span></li></ol>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<a href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fbazaar.eprints.org%2F304%2F1%2Fepm%2FDataCiteDoi%2Fcfg%2Fcfg.d%2Fz_datacitedoi.pl&amp;data=04%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7Cbb9562c58bb9407fb3be08d9d214fb66%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637771810845158082%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&amp;sdata=047Fh6lVk8dYVfdMqQbIxli2cVbEFbeoVIAZRf2tdGE%3D&amp;reserved=0" originalSrc="https://bazaar.eprints.org/304/1/epm/DataCiteDoi/cfg/cfg.d/z_datacitedoi.pl" shash="PPLexVV5TZjk+9JZAGnf3sC7PAG6b00NpnlD5F4yF+ExRa8rXBfFUC6+KuBGrYyqKt95bs6wuuYA5rFrgbdN1gi9FrLPvTG4ET9jaehWAlFmZupJxSR52SBg+wUEg7162j4b8GpHbjrhZOk2ZiYLf/qinY1vtkNGv9/ARo/AVWA=" originalsrc="https://bazaar.eprints.org/304/1/epm/DataCiteDoi/cfg/cfg.d/z_datacitedoi.pl" shash="Wp4/2d5f7iq6ViHEQH1m28ypEao0biFXCYcc2/pUDSSf4whh3zgbHR5UADPfF/rJt/PecsgVmps/4NpNu7ipDtxhY5HkYXx9xYxqbTw2pdI9rddISfctKKaqucT/RkMEJpJhyn8t5+7+Iu2M4D7BJfoldLZjsXd5mN/VVOPkDSg=" originalsrc="https://bazaar.eprints.org/304/1/epm/DataCiteDoi/cfg/cfg.d/z_datacitedoi.pl" shash="Gkw8QGYvW21gQ26+Lc/uuTvzU03BYsCzOK3/zt9wajwmpJbiDjjgK7kuRwMWLDp3K7yySxMp4VLJ91Ua7cUtYtS3OOn6V+gJbW1PQVNh5KgBy9wr7uUT04efRUR4ZB405/q8ncyAd8I9pwkPgGIiFl/5+aPOGQOe005K15aPxv0=" style="margin:0px; background-color:rgb(255,255,255)">https://bazaar.eprints.org/304/1/epm/DataCiteDoi/cfg/cfg.d/z_datacitedoi.pl</a></div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<span style="color:rgb(0,0,0); font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt">$c-&gt;{datacitedoi}{repoid} = $c-&gt;{host};</span></div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<span style="color:rgb(0,0,0); font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt"><br>
</span></div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
DataCite DOI minting, from the Bazaar, but in configuration file, so simply overwrote with &quot;$c-&gt;{securehost}&quot; in our local cfg/cfg.d/z_datacitedoi.pl</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<ol start="2">
<li style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
Core lib/cfg.d/misc.pl</li></ol>
<div><a href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Feprints%2Feprints3.4%2Fblob%2Fmaster%2Flib%2Fcfg.d%2Fmisc.pl&amp;data=04%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7Cbb9562c58bb9407fb3be08d9d214fb66%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637771810845158082%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&amp;sdata=aBcDdHSJJ4McXj%2BPwzkUI4lgUFtAsPH8UOTDR9TKKB8%3D&amp;reserved=0" originalSrc="https://github.com/eprints/eprints3.4/blob/master/lib/cfg.d/misc.pl" shash="ucsBmRwV+M3DBNSlGqAJ3omSiEv4oLeIpuwDl2Z8Djbc3K3bccS5JOT90aNKaw2Y3AYLHY0/PRIcwQb/ixs/QG3c0Tjq4j9tkXuQfJuJkogrqjRZ5SgO+1J8DDVeDnmkmdcwuAB8gAAl4UeURnhotn5JLobeghUnSuZJhcH4Sxs=" originalsrc="https://github.com/eprints/eprints3.4/blob/master/lib/cfg.d/misc.pl" shash="SVeWxgNxxY8rsIbEyo3GNVPrGGlzZ7VhE4GMHccShMRC+NzaWPNvI1W40EYRPl1bgBbKxeWCEPb1GDGqaqQOEyff50Qcjy2wIqYM0c2uGQSfjW9qBu6GmfF7myUlckfa7IJpFuRVe8Wv7rpEsyN7RGhO+Dtki3TbkDnGkZkyqqM=" originalsrc="https://github.com/eprints/eprints3.4/blob/master/lib/cfg.d/misc.pl" shash="d//MB4y2k9nYXdabwlNkqCA0lYbRC070t9DuJhFOeOLOabadYi4PQvcQuFb1qY8CxeBF3iBTBaGA66ex8gfnj4Swrbehz9/Fqfff1E105UUqMD2hhILcwzOzdpu97ftxPMnReuIl+n1XPs62sxAErWD4la0Tw1Y6+WGGEnENt5o=" id="LPNoLPOWALinkPreview">https://github.com/eprints/eprints3.4/blob/master/lib/cfg.d/misc.pl</a><br>
</div>
<div><span class="x_x_TextRun x_x_SCXO58643483 x_x_BCX0" lang="EN-US" style="margin:0px; font-variant-ligatures:none!important; color:windowtext; text-align:left; background-color:rgb(255,255,255); font-size:11pt; font-family:Calibri,Calibri_MSFontService,sans-serif; line-height:18px"><span class="x_x_NormalTextRun x_x_SCXO58643483 x_x_BCX0" style="margin:0px">$c-&gt;{</span><span class="x_x_SpellingError x_x_SCXO58643483 x_x_BCX0" style="">cookie_domain</span><span class="x_x_NormalTextRun x_x_SCXO58643483 x_x_BCX0" style="margin:0px">}
 = $c-&gt;{host};</span></span><span class="x_x_EOP x_x_SCXO58643483 x_x_BCX0" style="margin:0px; color:windowtext; text-align:left; background-color:rgb(255,255,255); font-size:11pt; line-height:18px; font-family:Calibri,Calibri_MSFontService,sans-serif">&nbsp;</span><br>
</div>
<div><span class="x_x_EOP x_x_SCXO58643483 x_x_BCX0" style="margin:0px; color:windowtext; text-align:left; background-color:rgb(255,255,255); font-size:11pt; line-height:18px; font-family:Calibri,Calibri_MSFontService,sans-serif"><br>
</span></div>
<div><span class="x_x_EOP x_x_SCXO58643483 x_x_BCX0" style="margin:0px; color:windowtext; text-align:left; background-color:rgb(255,255,255); font-size:11pt; line-height:18px; font-family:Calibri,Calibri_MSFontService,sans-serif">Not sure what to do with this
 one?&nbsp; Should I change that or do something about it, given that {host} is now undefined?</span></div>
<div><span class="x_x_EOP x_x_SCXO58643483 x_x_BCX0" style="margin:0px; color:windowtext; text-align:left; background-color:rgb(255,255,255); font-size:11pt; line-height:18px; font-family:Calibri,Calibri_MSFontService,sans-serif"><br>
</span></div>
<ol start="3">
<li><span class="x_x_EOP x_x_SCXO58643483 x_x_BCX0" style="margin:0px; color:windowtext; text-align:left; background-color:rgb(255,255,255); font-size:11pt; line-height:18px; font-family:Calibri,Calibri_MSFontService,sans-serif"></span>IRStats2&nbsp;</li></ol>
<div>Processor Referrer<br>
</div>
<div><a href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Feprints%2Firstats2%2Fblob%2Fmaster%2Flib%2Fplugins%2FEPrints%2FPlugin%2FStats%2FProcessor%2FAccess%2FReferrer.pm%23L24&amp;data=04%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7Cbb9562c58bb9407fb3be08d9d214fb66%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637771810845158082%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&amp;sdata=qvmB2Vb8ZX%2FrMun1pjzlM4N4a9TOeRU08C2cyUUL83o%3D&amp;reserved=0" originalSrc="https://github.com/eprints/irstats2/blob/master/lib/plugins/EPrints/Plugin/Stats/Processor/Access/Referrer.pm#L24" shash="Dkt6uvdcUrjA2JGX0EgivMj3G3yR04FDiYt7la8N5uga4zvUSNjUCDOasPL3GR4y3WiWapGxcRL7AYk17WPEb0SyWFrUHWFCnM+CYtVea68a8Sd2QlJlk2M9pu3/j17dQC0sBYzkLs/GSiNAm4TWkB6D2lToJYWTDpVY5BN+/IQ=" originalsrc="https://github.com/eprints/irstats2/blob/master/lib/plugins/EPrints/Plugin/Stats/Processor/Access/Referrer.pm#L24" shash="ugH0JzKWs4fMdvwHnB3PEmAChMtvOo9SrLp5GVPbYhOAkQk4zfgO2hU8G/TF23rqDnciA9sTLj9KHKUAnWyjmAUtef1MUL6GjQbe6VvWbS8S3fhDcWePEti0673cELLpNk4RAnBPlEofLKisXvZ3r+9FQ3HqiCG+I+Dyze9EEpg=" originalsrc="https://github.com/eprints/irstats2/blob/master/lib/plugins/EPrints/Plugin/Stats/Processor/Access/Referrer.pm#L24" shash="JyysR7YaTU2eR4mU+D00wF68/EuNcQFiBiUvFEqt+bAOVvZoXPfhXwpo+UbmoFS1/QH3Ekizdru/NW0v+hKyiC0b1rm4CEqu2wFfjMnjj5pAzPpx6A3IMly6dzcrzG1w3mAKwWACqveeE7uoaf2+Z2CJxNb8PcqdvGpLK4QwdXo=" id="LPNoLPOWALinkPreview_2">https://github.com/eprints/irstats2/blob/master/lib/plugins/EPrints/Plugin/Stats/Processor/Acc!
 ess/Referrer.pm#L24</a><br>
</div>
<div>$self-&gt;{host} = $self-&gt;{session}-&gt;config( &quot;host&quot; );<br>
</div>
<div><br>
</div>
<div><span style="font-family:Calibri,Arial,Helvetica,sans-serif; background-color:rgb(255,255,255); display:inline!important">Not sure if this would no longer work now that &quot;host&quot; is undef?</span><br>
</div>
<div><br>
</div>
<div>Also, not an issue on our repo, but config file on irstats2 has this (optional code, commented out by default and on our repo):</div>
<div><a href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Feprints%2Firstats2%2Fblob%2Fmaster%2Fcfg%2Fcfg.d%2Fz_irstats2.pl&amp;data=04%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7Cbb9562c58bb9407fb3be08d9d214fb66%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637771810845158082%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&amp;sdata=gRsgWBidfA2hIdjZZWZkPx2HabIK38AkH2%2FN%2BGcKFbg%3D&amp;reserved=0" originalSrc="https://github.com/eprints/irstats2/blob/master/cfg/cfg.d/z_irstats2.pl" shash="DwMCTe/mVvU1EaiEqFTsD5EGTX1FSMxZTXRQRU6Vt/DVqrnje+m+UiRHj9CmH2HorhAzA1xzZVtUD/irNm1iPZO69oYTSIcTMwtXtFtO5PuwJGYEXxW9DKv8ttvcqaKEGwHHz2Id9688IkaP0D2yBFkwmxUfGctOfu+CzehllD8=" originalsrc="https://github.com/eprints/irstats2/blob/master/cfg/cfg.d/z_irstats2.pl" shash="ChvDuUdRZE0vFvIDlHztWlDbkJIJy7BWeznv0gDGa4BuOYvJ9viZjk3LhagOZeJ/m5Mz7MXsDTe27z0swCtzncS0DwLwCabb3McuAmPR7Z3CxYC64aGxXNv1/Un5zJ5ExLGaec4RbU/Cl5QjJfC1OBzTcVbWjkePMlCxr/a69kA=" originalsrc="https://github.com/eprints/irstats2/blob/master/cfg/cfg.d/z_irstats2.pl" shash="x7Q/tQmV3d2lBAs+7R/vmNZ9piLo89GA0Le53yrCwSQdtAG3xfiTGXAPwtPxtm13WozmMNBbPgxXsA3jf9+b48RSI4xdug4Cak5KQsMx8Gpdn4wnFwrnlVvIYwuWj2QGvjGw7N3Yl+5dzhvciRlkTl2xLtzlVNfmePbhWF4/n6A=" id="LPlnkOWALinkPreview_1">https://github.com/eprints/irstats2/blob/master/cfg/cfg.d/z_irstats2.pl</a></div>
<div><span class="x_x_TextRun x_x_SCXO200029000 x_x_BCX0" lang="EN-US" style="margin:0px; font-variant-ligatures:none!important; color:windowtext; text-align:left; background-color:rgb(255,255,255); font-size:11pt; font-family:Calibri,Calibri_MSFontService,sans-serif; line-height:18px"><span class="x_x_NormalTextRun x_x_SCXO200029000 x_x_BCX0" style="margin:0px">my
 $hostname = $session-&gt;config( 'host' ) or return 0;</span></span><span class="x_x_EOP x_x_SCXO200029000 x_x_BCX0" style="margin:0px; color:windowtext; text-align:left; background-color:rgb(255,255,255); font-size:11pt; line-height:18px; font-family:Calibri,Calibri_MSFontService,sans-serif">&nbsp;</span></div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
Tomasz</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div id="x_x_Signature">
<div>
<div name="x_x_divtagdefaultwrapper" style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:; margin:0">
<div style="font-family:Tahoma; font-size:13px">
<p class="x_x_MsoNormal" style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin:0cm 0cm 0.0001pt; font-size:11pt; font-family:Calibri,sans-serif; color:rgb(33,33,33); background:white">
<span lang="FR-CA" style="">________________________________________________</span></p>
<p class="x_x_MsoNormal" style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin:0cm 0cm 12pt
                            17.85pt; font-size:11pt; font-family:Calibri,sans-serif; color:rgb(33,33,33); background:white">
<span lang="FR-CA" style="font-size:9pt; font-family:Arial,sans-serif; color:black">Tomasz Neugebauer<span style=""><br>
</span><span style="background-color:rgb(255,255,255); display:inline!important">Senior Librarian | Bibliothécaire titulaire
</span><span style="margin:0px; background-color:rgb(255,255,255)"><br>
</span>Digital Projects &amp; Systems Development Librarian / Bibliothécaire des Projets Numériques &amp; Développement de Systèmes<br>
Concordia University / Université Concordia</span></p>
<p class="x_x_MsoNormal" style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin:0cm 0cm 12pt
                            17.85pt; font-size:11pt; font-family:Calibri,sans-serif; color:rgb(33,33,33); background:white">
<span lang="FR-CA" style="font-size:9pt; font-family:Arial,sans-serif; color:black">Tel. / Tél. 514-848-2424 ext. / poste 7738<br>
Email / courriel:&nbsp;</span><a tabindex="0" href="mailto:tomasz.neugebauer@concordia.ca" target="_blank"><span lang="FR-CA" style="font-size:9pt; font-family:Arial,sans-serif; color:blue">tomasz.neugebauer@concordia.ca</span></a><span style="font-size:9pt; font-family:Arial,sans-serif; color:black"></span></p>
<p class="x_x_MsoNormal" style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin:0cm 0cm 12pt
                            17.85pt; font-size:11pt; font-family:Calibri,sans-serif; color:rgb(33,33,33); background:white">
<span lang="FR-CA" style="font-size:9pt; font-family:Arial,sans-serif; color:black">Mailing address / adresse postale:&nbsp;1455 De Maisonneuve Blvd. W.,&nbsp;LB-540-03, Montreal, Quebec H3G 1M8<br>
Street address / adresse municipale: 1400&nbsp;De Maisonneuve Blvd. W.,&nbsp;LB-540-03, Montreal, Quebec H3G 1M8</span></p>
<p class="x_x_MsoNormal" style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin:0cm 0cm 12pt
                            17.85pt; font-size:11pt; font-family:Calibri,sans-serif; color:rgb(33,33,33); background:white">
<span class="x_x_MsoHyperlink" style="color:rgb(5,99,193); text-decoration:underline"><span lang="IT" style="font-size:9pt; font-family:Arial,sans-serif; color:purple">library.concordia.ca</span></span></p>
</div>
</div>
</div>
</div>
</div>
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="x_x_divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> Tomasz Neugebauer
<a class="x_x_moz-txt-link-rfc2396E" href="mailto:Tomasz.Neugebauer@concordia.ca">
&lt;Tomasz.Neugebauer@concordia.ca&gt;</a><br>
<b>Sent:</b> Thursday, January 6, 2022 3:34 PM<br>
<b>To:</b> David R Newman <a class="x_x_moz-txt-link-rfc2396E" href="mailto:drn@ecs.soton.ac.uk">
&lt;drn@ecs.soton.ac.uk&gt;</a>; <a class="x_x_moz-txt-link-abbreviated x_x_moz-txt-link-freetext x_moz-txt-link-freetext" href="mailto:eprints-tech@ecs.soton.ac.uk">
eprints-tech@ecs.soton.ac.uk</a> <a class="x_x_moz-txt-link-rfc2396E" href="mailto:eprints-tech@ecs.soton.ac.uk">
&lt;eprints-tech@ecs.soton.ac.uk&gt;</a><br>
<b>Subject:</b> Re: [EP-tech] mixed-content warnings</font>
<div>&nbsp;</div>
</div>
<div dir="ltr">
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
Hi David,</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
Thank you for the detailed explanation and all of your work on this.</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
I did not know if unsetting {host} variable is the recommended way going forward, hence I hesitated, but g<span style="color:rgb(0,0,0); font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt">iven that our repository is HTTPS-only with HSTS , running
 on 3.4.3, unsetting the {host} to undefined seems like the best way forward.&nbsp; I will do that that.&nbsp; As I wrote, I did notice that this solves the issue on the testing server, it's just that I didn't know if that is a setting that is &quot;supported&quot;.&nbsp; These wiki
 help pages have the {host} set in the examples:</span></div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<span style="color:rgb(0,0,0); font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt"><a href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwiki.eprints.org%2Fw%2FHow_to_use_EPrints_with_HTTPS&amp;data=04%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7Cbb9562c58bb9407fb3be08d9d214fb66%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637771810845158082%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&amp;sdata=pvek8dpPflc8qFeVEfRY%2F%2BdZz%2BXDCj1zg2Qu8ZEK05A%3D&amp;reserved=0" originalSrc="https://wiki.eprints.org/w/How_to_use_EPrints_with_HTTPS" shash="AO/C4F0J/lSiJb/jKmy2mZ3/l0J0eRGM4hMM6M1qoz7CzocxBcvHcIOeW0J6WX+m6TbUILa88hWcZ34ufiG+hrtJlqdJ0Yf88hep9vA9C0rcALIuthBhFAjG8pWjdyPCTrt4VKeAfeXSmsTRSrU8Ci84rBDTYqk/zNIaNCLy15A=" originalsrc="https://wiki.eprints.org/w/How_to_use_EPrints_with_HTTPS" shash="w0llJW2ZFouC3YNA8plx5ap8W4/4J69w4QDJbDLXwDDSLEdYzdzAfyTtIWZ+wicz7nGUTJq0lgxQsapq9w2DC0ecMyifWkAwJCwBYmaYohqvN9EyUwzC63TjDL7/Mdap1WJHmgArvHu/ol/fk+BlrCnFCTM5eAXyjcGQZpkLtms=" originalsrc="https://wiki.eprints.org/w/How_to_use_EPrints_with_HTTPS" shash="WI557qcp/6zFCnI7w0Ixz4wAJLE/U8ubvElwuQsxZwmYCpEuqj83UT9EqFLz5gb78sHG79yolmu15JCk/lui+5yuGXH5NPImutUySklHrRaBo0GEzIzpvk012EC9+IMGsKhJrHgPRt7Dy5ZX8pCdo9hzzaLoD1Xtg4JIRlifI3U=" id="LPNoLPOWALinkPreview_1">https://wiki.eprints.org/w/How_to_use_EPrints_with_HTTPS</a><br>
</span></div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<a href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwiki.eprints.org%2Fw%2FHTTPS-only_and_HSTS&amp;data=04%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7Cbb9562c58bb9407fb3be08d9d214fb66%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637771810845158082%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&amp;sdata=6QoPpYA2akZgLvJ1uokqFexwZmGKqjtdfH9P3pwz%2BzM%3D&amp;reserved=0" originalSrc="https://wiki.eprints.org/w/HTTPS-only_and_HSTS" shash="M/7ULjqpYfZ+hpDrXTG6Q98HLQqnaRo9+gw0hrxII+tatBhlu1kjX5NjV7D1mT65qxLq0oYshoxcjYlqR9APb/JzGVzPjlUuMV3tlMMxYJXJ+UL9XRFU3ETypAC/OnLWSnxar5bGxZEk4sF0t4r53HDooBbDa4oeUMkMPfyQpac=" originalsrc="https://wiki.eprints.org/w/HTTPS-only_and_HSTS" shash="XOcEp7aSss2rTR2LWbU0xDePFn56/CtfCYJtK2u3puBkGg7bV1xFvyOdj0dToTBX/LycmNO5tH5fQVcL2S7N/i7ycyHyzPtqG7fLPQjE/jlTH4fjR62SEQJ+2wir8b+/pNIAN1x8sNcg+TzQ/2xPnOeC2S8KvaT7BW2beZiyz1s=" originalsrc="https://wiki.eprints.org/w/HTTPS-only_and_HSTS" shash="ayWac1NRSxJ5FD3NcJD4k+NAbWUbHsbDSLq1lTMwqqwGXW8AguA1acd7Sij7PX8256POwPAieisOdKB4A0YqzLH68zvlE/ndZuBRmM9bWcXWR++xKHhY5cd1llWWSZNgplX+wS2Z2JA1+N1tEkUcJJPSyINl2jTjvsDaAC/12gs=" id="LPNoLPOWALinkPreview_2">https://wiki.eprints.org/w/HTTPS-only_and_HSTS</a><br>
</div>
<div class="x_x_x__Entity x_x_x__EType_OWALinkPreview x_x_x__EId_OWALinkPreview_2 x_x_x__EReadonly_1">
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
and I was also unaware of this page:</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<a href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwiki.eprints.org%2Fw%2FSimplified_HTTPS_Configuration&amp;data=04%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7Cbb9562c58bb9407fb3be08d9d214fb66%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637771810845158082%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&amp;sdata=bs9CH%2FLCom5hrk41qZlGyqJDjxRj41sgr2xpLDGHNvo%3D&amp;reserved=0" originalSrc="https://wiki.eprints.org/w/Simplified_HTTPS_Configuration" shash="qehi61f8IFDvJx+VJjQ+qez+ARFgxauV6TR2+5Rbo9pT2FoZrvHaNv8Nmdg6JgTzQqlnqrnndh734v5HzmJXXBDGGbnaj8cg6vJjscCrQ+vZIhyjT2szO0o6jkiCudjA4GPce+RVPd5lagWon1dobpEdMUqiIMIshkR4hypD2VM=" originalsrc="https://wiki.eprints.org/w/Simplified_HTTPS_Configuration" shash="tmZ1ijRuscG+/1Qz4AIYbMHqWHfHUH5Rkao3971t4I5FHDKDrk13bjSkYIOoIdKqF9tEMu0CMTj88uVi457TYUJXaTeyYFxEmlGnvZytVyJFq9bHM7ZzNB/UPJUMSjEAHU9K4e0GmdTw8fmzRcd4uai6mKtXU1CoX3kzjZALlZE=" originalsrc="https://wiki.eprints.org/w/Simplified_HTTPS_Configuration" shash="MdWLZXcnqpfX8fRTUNCmJaocp1G8mnc+chYSjpUGTYny9+t4GwfAXVkAcvwEVHw0uuH75X23l+/9ZQqQceYbGyYQy/7v02/RudbM+1vBjlbIlEqmYSBFEVay3AaIm+XdAcx1P/1a9bqMR2Ao5kWHMuDVyGZTqRGBZWkHicdXi5c=" id="LPNoLPOWALinkPreview">https://wiki.eprints.org/w/Simplified_HTTPS_Configuration</a><br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
Let's add a link to the &quot;Simplified HTTPS Configuration&quot; page from some of these others?<br>
<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
I did track down the same line that you referenced (<span style="font-size:14px; color:rgb(0,0,0)">perl_lib/EPrints/URL.pm) while troubleshooting, so it is reassuring that I was on the right track:
</span><span style="color:rgb(0,0,0); font-size:14px">if ( EPrints::Utils::is_set( $session-&gt;config( &quot;securehost&quot; ) ) &amp;&amp; ( $opts{scheme} eq &quot;https&quot; || !EPrints::Utils::is_set( $session-&gt;config( &quot;host&quot; ) )&quot;</span></div>
<div style="color:rgb(0,0,0)"><span style="font-size:14px"><br>
</span></div>
<div style="color:rgb(0,0,0)"><span style="font-size:14px">I will search through our configuration files to make sure that &quot;host&quot; variable isn't used for something without a fallback, but I think that I will not find that.&nbsp; I was more worried about breaking
 something in the core by unsetting that {host} variable, so your message was very helpful.</span></div>
<div style="color:rgb(0,0,0)"><span style="font-size:14px"><br>
</span></div>
<div style="color:rgb(0,0,0)"><span style="font-size:14px">Best wishes,</span></div>
<div style="color:rgb(0,0,0)"><span style="font-size:14px"><br>
</span></div>
<div style="color:rgb(0,0,0)"><span style="font-size:14px">Tomasz</span></div>
<div style="color:rgb(0,0,0)"><span style="font-size:14px"><br>
</span>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; font-size:14px; background-color:rgb(255,255,255); margin-top:0px; margin-bottom:0px">
<br>
</p>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div class="x_x_x__Entity x_x_x__EType_OWALinkPreview x_x_x__EId_OWALinkPreview x_x_x__EReadonly_1">
</div>
<br>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<span style="color:rgb(0,0,0); font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt"><br>
</span></div>
<div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div id="x_x_x_Signature">
<div>
<div name="x_x_x_divtagdefaultwrapper" style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:; margin:0">
<div style="font-family:Tahoma; font-size:13px">
<p class="x_x_x_MsoNormal" style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin:0cm 0cm
                              0.0001pt; font-size:11pt; font-family:Calibri,sans-serif; color:rgb(33,33,33); background:white">
<span lang="FR-CA" style="font-size:8pt; font-family:&quot;Courier New&quot;; color:rgb(166,166,166)">________________________________________________</span></p>
<p class="x_x_x_MsoNormal" style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin:0cm 0cm 12pt
                              17.85pt; font-size:11pt; font-family:Calibri,sans-serif; color:rgb(33,33,33); background:white">
<span lang="FR-CA" style="font-size:9pt; font-family:Arial,sans-serif; color:black">Tomasz Neugebauer<span style=""><br>
</span><span style="background-color:rgb(255,255,255); display:inline!important">Senior Librarian | Bibliothécaire titulaire
</span><span style="margin:0px; background-color:rgb(255,255,255)"><br>
</span>Digital Projects &amp; Systems Development Librarian / Bibliothécaire des Projets Numériques &amp; Développement de Systèmes<br>
Concordia University / Université Concordia</span></p>
<p class="x_x_x_MsoNormal" style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin:0cm 0cm 12pt
                              17.85pt; font-size:11pt; font-family:Calibri,sans-serif; color:rgb(33,33,33); background:white">
<span lang="FR-CA" style="font-size:9pt; font-family:Arial,sans-serif; color:black">Tel. / Tél. 514-848-2424 ext. / poste 7738<br>
Email / courriel:&nbsp;</span><a tabindex="0" href="mailto:tomasz.neugebauer@concordia.ca" target="_blank"><span lang="FR-CA" style="font-size:9pt; font-family:Arial,sans-serif; color:blue">tomasz.neugebauer@concordia.ca</span></a><span style="font-size:9pt; font-family:Arial,sans-serif; color:black"></span></p>
<p class="x_x_x_MsoNormal" style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin:0cm 0cm 12pt
                              17.85pt; font-size:11pt; font-family:Calibri,sans-serif; color:rgb(33,33,33); background:white">
<span lang="FR-CA" style="font-size:9pt; font-family:Arial,sans-serif; color:black">Mailing address / adresse postale:&nbsp;1455 De Maisonneuve Blvd. W.,&nbsp;LB-540-03, Montreal, Quebec H3G 1M8<br>
Street address / adresse municipale: 1400&nbsp;De Maisonneuve Blvd. W.,&nbsp;LB-540-03, Montreal, Quebec H3G 1M8</span></p>
<p class="x_x_x_MsoNormal" style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin:0cm 0cm 12pt
                              17.85pt; font-size:11pt; font-family:Calibri,sans-serif; color:rgb(33,33,33); background:white">
<span class="x_x_x_MsoHyperlink" style="color:rgb(5,99,193); text-decoration:underline"><span lang="IT" style="font-size:9pt; font-family:Arial,sans-serif; color:purple">library.concordia.ca</span></span></p>
</div>
</div>
</div>
</div>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="x_x_x_divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> David R Newman
<a class="x_x_moz-txt-link-rfc2396E" href="mailto:drn@ecs.soton.ac.uk">&lt;drn@ecs.soton.ac.uk&gt;</a><br>
<b>Sent:</b> Thursday, December 23, 2021 8:00 PM<br>
<b>To:</b> <a class="x_x_moz-txt-link-abbreviated x_x_moz-txt-link-freetext x_moz-txt-link-freetext" href="mailto:eprints-tech@ecs.soton.ac.uk">
eprints-tech@ecs.soton.ac.uk</a> <a class="x_x_moz-txt-link-rfc2396E" href="mailto:eprints-tech@ecs.soton.ac.uk">
&lt;eprints-tech@ecs.soton.ac.uk&gt;</a>; Tomasz Neugebauer <a class="x_x_moz-txt-link-rfc2396E" href="mailto:Tomasz.Neugebauer@concordia.ca">
&lt;Tomasz.Neugebauer@concordia.ca&gt;</a><br>
<b>Subject:</b> Re: [EP-tech] mixed-content warnings</font>
<div>&nbsp;</div>
</div>
<div>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px">
<span style="font-weight:bold; color:rgb(156,0,0)">Attention</span> This email originates from outside the concordia.ca domain. // Ce courriel provient de l'exterieur du domaine de concordia.ca</p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px">
<br>
</p>
<div><br>
</div>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px">
Hi Tomasz,</p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px">
<br>
</p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px">
Mixed content warnings is something, I have been trying to improve in recent version of EPrints, so new installs should not suffer these problems.&nbsp;&nbsp; However, upgrades will still be problematic.&nbsp; This is because old templates, citations, workflows and even CSS
 and Javascript files may have http URLs in them.&nbsp; This means you really need to go through all these files and seek out http URLs.</p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px">
<br>
</p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px">
The main problem I have found is the use http_url or http_cgiurl in templates citations and even workflows.&nbsp; These should ideally use rel_path and rel_cgipath instead but as this does not give your the full URL it might be better to use base_url and perl_url
 instead.&nbsp; However, to make sure that these are https not http, you will need to make sure you have either no or an up to date version of 20_baseurls.pl in your archive's cfg/cfg.d/ (assuming you are running 3.4.1+, which it sounds like you are).&nbsp; This is because
 of a change made for 3.4.1 to ensure that base_url and perl_url get configured as https if $c-&gt;{securehost} is defined.<br>
</p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px">
<br>
</p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px">
It is worth grepping across all of your archive's cfg directory for the string &quot;http:&quot; to route out any hardcoded http URLs.</p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px">
<br>
</p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px">
One of the things I did in recent versions of EPrints is provide a way of reconfiguring 10_core.pl to better/more intuitive enable HTTPS everywhere [1].&nbsp; This ensures all http URL requests are redirected to https without needing to have picked up the HSTS header,
 which require visiting an https URL at least once (and therefore does not work for stateless bots).&nbsp; If you deploy HTTPS everywhere, as well as running generate_apacheconf and reloading the webserver, you will need to make sure all browse views and abstract
 pages are regenerated.&nbsp; <br>
</p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px">
<br>
</p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px">
As you comment in your email below, you are worried about unsetting $c-&gt;{host} as it may break things.&nbsp; I am aware of one issue with this in 3.4.3 core code [2].&nbsp; However, this is a fairly straightforward fix and is only a problem if your have multiple languages
 enabled for your repository.&nbsp; If you use the Repository Links Bazaar plugin [3], that will also require a similar fix.&nbsp; I think there may be one or two other Bazaar plugins that use $c-&gt;{host} but I cannot remember what they are off the top of my head.<br>
</p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px">
<br>
If you look at perl_lib/EPrints/URL.pm line 129 [4] you should see the line:</p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px">
<br>
</p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px">
if ( EPrints::Utils::is_set( $session-&gt;config( &quot;securehost&quot; ) ) &amp;&amp; ( $opts{scheme} eq &quot;https&quot; || !EPrints::Utils::is_set( $session-&gt;config( &quot;host&quot; ) )
<br>
</p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px">
<br>
</p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px">
If you have HTTPS everywhere configuration enabled this should ensure HTTPS URLs are always used for things like the thumbnail URLs you describe having a problem with.&nbsp; However, if you are not using HTTPS everywhere configuration you will still get http URLs
 for thumbnails and similar.&nbsp; I would therefore recommending enabling this and I will see if I can track down the Bazaar plugins that may be affected by $c-&gt;{host} being undefined.</p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px">
<br>
</p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px">
The problem with EPrints is it has gone through various iterations of HTTP/HTTPS use:</p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px">
<br>
</p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px">
1. No HTTPS <br>
</p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px">
2. HTTP for public pages and HTTPS for back-end admin pages.</p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px">
3. HTTPS for all pages</p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px">
<br>
</p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px">
This means as the code has evolved over time how to configure the appropriate URLs in various situation has got progressively more complicated, as way of supporting these different approaches for HTTPS have been incorporated into ePrints over the year.&nbsp; I go
 in to a bit of detail about this in the EPrints 3.4.3 release page [5].&nbsp; I still don't think this is perfect, as there is the potential requirements in Bazaar plugins or bespoke archive code/configuration that require $c-&gt;{host} to be defined.&nbsp; However, after
 a lot of consideration, the changes I made for 3.4.3 tried to make the best compromise between fixing the mixed content warnings, simplifying URLs config variables and their use and not seriously breaking existing repositories when they are upgraded.<br>
</p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px">
<br>
</p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px">
Regards</p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px">
<br>
</p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px">
David Newman<br>
</p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px">
<br>
</p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px">
[1] <a class="x_x_x_x_moz-txt-link-freetext" href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwiki.eprints.org%2Fw%2FSimplified_HTTPS_Configuration&amp;data=04%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7Cbb9562c58bb9407fb3be08d9d214fb66%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637771810845158082%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&amp;sdata=bs9CH%2FLCom5hrk41qZlGyqJDjxRj41sgr2xpLDGHNvo%3D&amp;reserved=0" originalSrc="https://wiki.eprints.org/w/Simplified_HTTPS_Configuration" shash="qehi61f8IFDvJx+VJjQ+qez+ARFgxauV6TR2+5Rbo9pT2FoZrvHaNv8Nmdg6JgTzQqlnqrnndh734v5HzmJXXBDGGbnaj8cg6vJjscCrQ+vZIhyjT2szO0o6jkiCudjA4GPce+RVPd5lagWon1dobpEdMUqiIMIshkR4hypD2VM=" originalsrc="https://wiki.eprints.org/w/Simplified_HTTPS_Configuration" shash="tmZ1ijRuscG+/1Qz4AIYbMHqWHfHUH5Rkao3971t4I5FHDKDrk13bjSkYIOoIdKqF9tEMu0CMTj88uVi457TYUJXaTeyYFxEmlGnvZytVyJFq9bHM7ZzNB/UPJUMSjEAHU9K4e0GmdTw8fmzRcd4uai6mKtXU1CoX3kzjZALlZE=" originalsrc="https://wiki.eprints.org/w/Simplified_HTTPS_Configuration" shash="teYmYXEL1NMexwu9cy4VkTRBthzmV2o9/m8ybgU03rIN12wfuqTvqhtyHUJlYwOf2WrG0hF7T+T5Q/eQibWTjI51npALekAnGARzt6YQp4RuSIis9BOORHOr7h7T25opetxerGxio0S0tv0PWQkPp+XXad7alHqbtwlG05VA9Ls=">
https://wiki.eprints.org/w/Simplified_HTTPS_Configuration</a></p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px">
[2] <a class="x_x_x_x_moz-txt-link-freetext" href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Feprints%2Feprints3.4%2Fissues%2F118&amp;data=04%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7Cbb9562c58bb9407fb3be08d9d214fb66%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637771810845158082%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&amp;sdata=30WlWWNNxqr7DiKi0oWW9MdXkB7k90RcuIC29bkpRKw%3D&amp;reserved=0" originalSrc="https://github.com/eprints/eprints3.4/issues/118" shash="T7nhzan2bC2SiN8kulSSYSycyOKKeqFPlG5D2vo2WdjfwZZeaoxCUSb+X7+yijws8BUEEImBLDoHx6Wz5Lg9rYQmXqNFm/SgV+ejyaTs8wjVqiyHKqw/pLQppmmbvufXZm1LaOrYoZXYpUxyLY7uvOLCtJ2a3EylccLRvHM4rko=" originalsrc="https://github.com/eprints/eprints3.4/issues/118" shash="IKBjDUYiLSal7Rlxz7TTY0m3Dayg+kakD+ovxSVJYz67FMYMSisyx6S1tTGfgTsEbinQPhMidQ5OTASc5u2NOw3T4oIoNHQbfshJHZhHZc1NrwMRrk85VD/K9PTGC1miVW+OOqU1gU9CgRRg3gx/YIoBYJ8S7emNVfFKFD5UHJI=" originalsrc="https://github.com/eprints/eprints3.4/issues/118" shash="MA62by+wM5QX8Xv04xpK+p2tRmnyMZRzj2rwSpRmdaCLwNcwERmOBG69nN1f8b9AAO2cfQeao5T+OT5x0NUfw4X4lVFgbIDUIDLwbDpaS5KqGhszuPYrypvHVdAIlwUAZMztRFFWNPBdkNqUJ6jengAeIKeIt6W5KLdZfzcVa/A=">
https://github.com/eprints/eprints3.4/issues/118</a></p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px">
[3] <a class="x_x_x_x_moz-txt-link-freetext" href="https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fbazaar.eprints.org%2F379%2F&amp;data=04%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7Cbb9562c58bb9407fb3be08d9d214fb66%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637771810845158082%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&amp;sdata=cbud43YU2YGumq2bsYgQA7fL%2Be2RpEs8nBqrVIWE8rw%3D&amp;reserved=0" originalSrc="http://bazaar.eprints.org/379/" shash="g5WDKupGnwWM6ixFXzOuUuFWxFF6jQLJ4lSbrrpMU6x1gE/zq/raBODkC+uAl4Two5CSeZwP6xSjduuBE17chFGKKC6lbYvG9z5ZWLumWS+knS4aBmS+ajwhUPJ1NRmZvoyDqCTLGLFCkhJd+g+/GbAh4Nr83B3I3/7YtJf5DQ4=" originalsrc="http://bazaar.eprints.org/379/" shash="M2Iz+/OWOchz0hhvCABJoc9Kl7BtvuisBZGuHDvdsZfQoGhAArc25Nh2L8KhgBWsimjh0RZdf0mu9AKpXnjYI0FUUEfAR4XwbWtEi8GCEHPIaTKVI1fqxBC5n2ClDmf5aE2ngBwHGQKIFqPN34v+Wp1cyq2CRq2JsdeNyCaHaE8=" originalsrc="http://bazaar.eprints.org/379/" shash="rSBdiVGe+gH8ZF5OUUcb8aUpzSpWVarzvP2gG2gR69/0wg1dvU2P/RFujYhoMiCv+cbN2Ixp7Ynnq7bA/XX8rBxVJXJrDURFpoxdbUMD98TtOazEUPpmAxAfDo2jgP1yklUYUCkJLCZ0FM7sn3DAt69hOoLxh9JiAs3aiTUbWZo=">
http://bazaar.eprints.org/379/</a><br>
</p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px">
[4] <a class="x_x_x_x_moz-txt-link-freetext" href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Feprints%2Feprints3.4%2Fblob%2Fmaster%2Fperl_lib%2FEPrints%2FURL.pm%23L129&amp;data=04%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7Cbb9562c58bb9407fb3be08d9d214fb66%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637771810845158082%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&amp;sdata=c7HRhIAKfrByJF%2F2aZoRKAw9pfW8vQjDfgD4zN5m704%3D&amp;reserved=0" originalSrc="https://github.com/eprints/eprints3.4/blob/master/perl_lib/EPrints/URL.pm#L129" shash="fq6W9vRz92XG2olVoGvdCkbg6R+MojSftqpkh72sUyPa8ll3ZskT4uqTrktYtCBBmKQqT3qXOvWQpeRCIRFvASidWd19LkOCPbdCtD99ziD7Pz9N0YUzMmvPAmQEhpOvh2xXRWs23cUr773DWKPfD4G0y4omCg7XmWi1kcj/IAs=" originalsrc="https://github.com/eprints/eprints3.4/blob/master/perl_lib/EPrints/URL.pm#L129" shash="Ole/OKTtVdyGAtOYSOc5NG4Fc0IviqwtoS0wKgGve+zcYlQX+ZrhLYfZpqeKveUjo64hTk+Hol/aG9I1fIdkwKwL9k8e635Wq/sPnIz2UahYQeulH8bUFmBczDlArW3rntREd33oXBwQv1rE/IwAd/ggf2+/+wIZFGS+lbkvPu0=" originalsrc="https://github.com/eprints/eprints3.4/blob/master/perl_lib/EPrints/URL.pm#L129" shash="dTYui0Pckvqzy767KdWP9HsETjfWDtlcBVPJ8rL6nxiSTnWoQh4QbWM7KeAG5fmVla2G0B8tjzYZ9sVtSCyc0rK3mwLXChl5Sbd2SuqA9n8JKEhx6c5UYHR1CU70EtGQhR+JCawB4FEiPYJ/eSOon5dmITi12JP3ySZUjOOZmlE=">
https://github.com/eprints/eprints3.4/blob/master/perl_lib/EPrints/URL.pm#L129</a></p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px">
[5] <a class="x_x_x_x_moz-txt-link-freetext" href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwiki.eprints.org%2Fw%2FEPrints_3.4.3%23Configuration_URLs_and_Paths&amp;data=04%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7Cbb9562c58bb9407fb3be08d9d214fb66%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637771810845158082%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&amp;sdata=Vp5SPlv3klYHmRLjjD%2BtZGUAoCexAH5Gdpzi5yUbaYc%3D&amp;reserved=0" originalSrc="https://wiki.eprints.org/w/EPrints_3.4.3#Configuration_URLs_and_Paths" shash="CrEqB6wKKW4FzTfjBF+rRfbAEg0u27WqjaWw/YdXurdzgClBKxjNlTpgeJ0MAOOe3K395AQdF1I8w/xIOPuWnYzEvzuowSJgAgjG4j/vJtYXXCrPa8joLD1pZ+nDqOgFvMcvPATMTnKXKiSgajNdjQccttSwz6E7juW93PIxbxk=" originalsrc="https://wiki.eprints.org/w/EPrints_3.4.3#Configuration_URLs_and_Paths" shash="PNPIPoS4DmuQZiy+Qyir9XEGp2pIbMP5rC6BYPzNeY7X4oLWhCHv7+oSJFLrOEzYTfNU5KC8csGmLzPqXov5xq2xLH0qYDMILEscCHBqDe4fZNc3K+7/y/o4sYHv/vqp2jfIdBwL7V8jWJiQDPNUb+WYNrsS/vXwNTXxXQAyVDU=" originalsrc="https://wiki.eprints.org/w/EPrints_3.4.3#Configuration_URLs_and_Paths" shash="NyE4oeDHCYHK/ijkEsFxX2yVkbvnyWTRCWica1VAp0GbllOPwDfb057jLVSSRazCSDbz1yYdqSdsCbN9ZT6atpuhQdUZu0udOXJsE+02+gk+A5Hp3M7FSjAui86lFFK/AMQqT3/iatyeOup7q0dr4MZC0UPWQAcB56gC1vHZWI0=">
https://wiki.eprints.org/w/EPrints_3.4.3#Configuration_URLs_and_Paths</a></p>
<p style="margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px">
<br>
</p>
<div class="x_x_x_x_moz-cite-prefix">On 23/12/2021 23:12, Tomasz Neugebauer via Eprints-tech wrote:<br>
</div>
<blockquote type="cite">
<div style="padding-bottom:10px; padding-top:5px">
<div style="padding:12px; border:1px solid
                          #8D3970; background-color:#F7F9FA; color:#8D3970; font-size:14px; line-height:22px; font-family:Calibri,Arial,Helvetica,sans-serif">
<strong>CAUTION:</strong> This e-mail originated outside the University of Southampton.
</div>
</div>
<div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
I thought​ that I resolved all of the &quot;mixed content&quot; warnings on our repository a while back, but after a recent upgrade from 3.3.12 to 3.4.3, I noticed that I have some mixed content warnings again, specifically on the thumbnails on the abstract pages.&nbsp; I
 might have missed some of these warning before, though, so this might not be a new issue after the upgrade.&nbsp;&nbsp;</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
Because I have HSTS headers, the browser redirects those those requests to HTTPS, but I would like to fix it.&nbsp; Both the SRC and the HREF of the thumbnails for PDFs are referenced as HTTP instead of HTTPS.&nbsp; The only thing that fixed it during my testing was
 if I was to remove (comment out) &quot; the&nbsp;<span style="background-color:rgb(255,255,255); display:inline!important">$c-&gt;{host}<span>&nbsp;</span></span> line/ariable in 10_core.pl</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
That resolves the issue, but I'm worried to apply this change because I don't know if something else might rely on that variable.</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
I spent a good part of a day trying to follow the code, and I know that the {scheme} variable in URL.pm doesn't get properly set to https in the case of the thumbnails, but the code is so confusing when it comes to the thumbnail URLs that I can't figure out
 why.&nbsp; I do have a suspicion that there is a bug in the core code somewhere, but perhaps it is something in our own configuration.&nbsp;</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
I know this issue is not new to this list, in fact, I wrote the first drafts of the HSTS page on the Wiki (<a href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwiki.eprints.org%2Fw%2FHTTPS-only_and_HSTS&amp;data=04%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7Cbb9562c58bb9407fb3be08d9d214fb66%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637771810845158082%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&amp;sdata=6QoPpYA2akZgLvJ1uokqFexwZmGKqjtdfH9P3pwz%2BzM%3D&amp;reserved=0" originalSrc="https://wiki.eprints.org/w/HTTPS-only_and_HSTS" shash="M/7ULjqpYfZ+hpDrXTG6Q98HLQqnaRo9+gw0hrxII+tatBhlu1kjX5NjV7D1mT65qxLq0oYshoxcjYlqR9APb/JzGVzPjlUuMV3tlMMxYJXJ+UL9XRFU3ETypAC/OnLWSnxar5bGxZEk4sF0t4r53HDooBbDa4oeUMkMPfyQpac=" originalsrc="https://wiki.eprints.org/w/HTTPS-only_and_HSTS" shash="PQF0iphJwGveia9qhaLexiUaWG8VGIc4Y13RsdSijrhqXVcfzaGuVVQyRJynqJBUjhGoT9BvBFKW/tZDZOedNCdA8iSidI9GfusVY/JHmmfKdoRquR9nbYNwMiih4SP1/16zwQtML+nxBqEkyUI0emBjs5PhzuQ8+y6oy9g/iCY=" originalsrc="https://wiki.eprints.org/w/HTTPS-only_and_HSTS" shash="o/OWSZ8EeGMbfWgeFZAFhxZxGFRl7H/5KNSRuO3evTVN4OIPrcd03fMZ4UMFp996stoxhUWEcNmdBhGM89JCfUCM3WFjarPBmRJkc8OFQ0R40diR9zQ3bFBzuXWvLNV3HIKVd/LqsxYgUcbTvwNE4t9ZdJTmgy1R3M3I0b0BOyA=" id="LPNoLPOWALinkPreview">https://wiki.eprints.org/w/HTTPS-only_and_HSTS</a>),
 but looking through the updated page there and any recent exchanges that relate to this didn't help me figure it out.&nbsp;&nbsp;</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
Let me know if you have any ideas?</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
Best wishes,
<div>Tomasz</div>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div>
<div id="x_x_x_x_Signature">
<div>
<div name="x_x_x_x_divtagdefaultwrapper" style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:; margin:0">
</div>
</div>
</div>
</div>
</div>
<br>
<fieldset class="x_x_x_x_moz-mime-attachment-header"></fieldset>
<pre class="x_x_x_x_moz-quote-pre">*** Options: <a class="x_x_x_x_moz-txt-link-freetext" href="https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fmailman.ecs.soton.ac.uk%2Fmailman%2Flistinfo%2Feprints-tech&amp;data=04%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7Cbb9562c58bb9407fb3be08d9d214fb66%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637771810845158082%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&amp;sdata=hNaAXEWPEjJkE%2BJ%2F%2FgDSMlx3hU3Il%2FAD%2FBMObc%2FP0no%3D&amp;reserved=0" originalSrc="http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tech" shash="j9KwqXupJhIBuwljJwbW5Y1fgXtOYe8dPPg+I7q7OTcASWO0zj203S1sBCAN1wtYj+zBzCDG3cdnUfihYbbb+nGYtadZCQ4PKEnjrxYjrFaNo5NwItuJjB/ticJo9mNPur0BuMncIEX0Fj34BtVaCUGG3Y8k7REqu+f7NW7ol04=" originalsrc="http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tech" shash="oLYLI9YedYJOKeWVR7+haY4ndQkA4h9eqLbjAfIFzbYkhO8BYRVyQLzvCEqWrifv+epLD9WwNtrQBIkmj4UELV87FlO9EltI82Yy/BoGIARhkKz9HV9JkPDMcvdJenWFzpsBQ/ORuv62uJ0ABjwouzjF1y1UHd77sq50bT5DjwY=" originalsrc="http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tech" shash="v0i6vbV15FN3mMJfKLng/ZxPRCO92RmDUQZqfGgMLRwW70GIGxjSTnTV+q2VBtbzMxgx0/SJVGJ+0teDKY5bEAUxtj3E0XKToIQTPm6y1L4glz//JIt5HBWxQpqhwSR0iqVojAjbN/vfYla2Mp+GrBMtL1eAlT2qMkDDT94YgPU=">http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tech</a>
*** Archive: <a class="x_x_x_x_moz-txt-link-freetext" href="https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.eprints.org%2Ftech.php%2F&amp;data=04%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7Cbb9562c58bb9407fb3be08d9d214fb66%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637771810845158082%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&amp;sdata=gcowSo5MQrqjqmybR%2FbilJn7TbVSjR7FaKkDVGXLrs0%3D&amp;reserved=0" originalSrc="http://www.eprints.org/tech.php/" shash="lsNJDSfhO/nAE6Af2fK+jqWwVxLurA95hbI7/apmqMfIg07vU89yDGUHP9CDuZQ/C4QC+bkb3sxknKfeUa8+ZMKHmokGPd27/0zFPP1dJ44i32c3lsQWXUF7RsZEJe0u0QA9kPoemPTpculP2N4XL8nXHkTFodpSe2gps/RdCL4=" originalsrc="http://www.eprints.org/tech.php/" shash="ExZs1VYQRPwxDfjsjbsC1jHvs2iuNK+4fs8rEyYZ/0cb6h391vy3P9BALwiLAL810CDQhhXA9Xc7TnU3IQJ12Fs1SWTvfo5oNBkUtyNAPWoqnLeEaj1TqtO7YAEeO6pObv/z8uCwJT6SNd2JdRbObflOoZolV/6q9VcIN3Ssm3s=" originalsrc="http://www.eprints.org/tech.php/" shash="eQXg/BIQn0BnLJB1w53W6/JK1h1REXb+APklxSnUvp+8YCt8TNijlTmi9ZHX7R8mcaV0MuKJDWMWFsI508MVOBPz+x8HdWCfncNi9XVGlr1zgas9Pth8vNZhwNXM4ljZ9SCwSGmCVOTkNzcqUU2Lbr+323Nw9f6/bNrxIF8tvEU=">http://www.eprints.org/tech.php/</a>
*** EPrints community wiki: <a class="x_x_x_x_moz-txt-link-freetext" href="https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwiki.eprints.org%2F&amp;data=04%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7Cbb9562c58bb9407fb3be08d9d214fb66%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637771810845158082%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&amp;sdata=7K9S%2BneTV8LWdllR1nx6RR9WMV7jX%2FrJfQWsjE6dYUg%3D&amp;reserved=0" originalSrc="http://wiki.eprints.org/" shash="sigyWlqAboe+3zp6Jt9PaT4XpKT1pURVNiDqEtmuc2DLaW9OY/9t0HEL4kpDz4NS3llB3WXGNzGnt69tYgzdL3JFlhSbCwcbHCZKwi9IxOqzzQX9UVynu25DhrssNH+IaQT3hRmbZxDm2Rx+j/2+t5Twe9vKioQeyu0UaqTAa6Y=" originalsrc="http://wiki.eprints.org/" shash="yAgydQGnrXtYjcbQzcTA9t/ONxZYDGJfKOvFSWVE0/9MOzc8JP2WRe/BulzbscjZCDIpcWUH7nbR8dcvEozKABBZATrA6VMFU+rMwntoUwXJpLjuHLllhibqB5OQyUe5XUcIm0oVEVL1fDYGLTEl2k4AUg5eoZQU5t75NEayiow=" originalsrc="http://wiki.eprints.org/" shash="lqiPTKsXamExYlkOjgRQ/OkMJh/T/mw9LH2uG6Um+EU7NLz6YeHaT4M6SOp4LGgB7BwwPZ2YnMXb5Ie5AVLsxhtUgAf+8dOxcP+v+ULVKpUKz3TOw5Awayvwe2FD6G41X6Y7ET4v91TBKy2iB7SCPxbd38rYEJiYGUJI5aVVhgw=">http://wiki.eprints.org/</a></pre>
</blockquote>
<div id="x_x_x_x_DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2"><br>
<table style="border-top:1px solid #D3D4DE">
<tbody>
<tr>
<td style="width:55px; padding-top:13px"><a href="https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.avg.com%2Femail-signature%3Futm_medium%3Demail%26utm_source%3Dlink%26utm_campaign%3Dsig-email%26utm_content%3Demailclient&amp;data=04%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7Cbb9562c58bb9407fb3be08d9d214fb66%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637771810845158082%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&amp;sdata=H8glBNYyfuL96YJSNM0x6cRTJOJKqxmAPtrC%2BivXJ4Y%3D&amp;reserved=0" originalSrc="http://www.avg.com/email-signature?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=emailclient" shash="iopLkM765A/0mcLdxAcUddutpwgA8Nxr2/65tw14Yzb1g5IQoeXzZNPr2t5OzcSD7nrJlGpNuQB3GMvlzezxJcjxZoNRvWiGOFkDuvp19qYq5g2aHmXoAUgkdfqCC7gtT1ZLtt4zyRTdx0aAplFtDxhsFJgUpHktCq/eceDbs1w=" originalsrc="http://www.avg.com/email-signature?utm_medium=email&amp;utm_source=link&amp;utm_campaign=sig-email&amp;utm_content=emailclient" shash="ZsOeXRL+VtDZC4Ej/QEyEkhjk5U5kt/UCmbW3+Rzg4LG4/XeJFfsRwYMhWKqC9p4v74O4mINgwc6ZfY7SZy1RnHaWOMbIdjpVSwRqMYc8E4173O+XcT9KpyTRajpfSJtVFWunC6Awlmzx259rI4vVy2F7XGP6beJnKu00I6jyxQ=" originalsrc="http://www.avg.com/email-signature?utm_medium=email&amp;utm_source=link&amp;utm_campaign=sig-email&amp;utm_content=emailclient" shash="fVTq5XTZeJnauSnaCDOH2nZA6zkSryLd/Av/ehDBqzGwMoZXXJTltrVGnX7c9smT9cCrTgIUtjCWI4vAeV4HUKZ/Y/AejsEl387J0wOZ0MdPfR9juhBpLaP2cjD3l6ryRu0kZgO3jtqxwKkZP4LKnLhKccY+g6vpJEhtpJJnhoE=" target="_blank"><img alt="" width="46" height="29" style="width:46px; height:29px"></a></td>
<td style="width:470px; padding-top:12px; color:#41424e; font-size:13px; font-family:Arial,Helvetica,sans-serif; line-height:18px">
Virus-free. <a href="https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.avg.com%2Femail-signature%3Futm_medium%3Demail%26utm_source%3Dlink%26utm_campaign%3Dsig-email%26utm_content%3Demailclient&amp;data=04%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7Cbb9562c58bb9407fb3be08d9d214fb66%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637771810845158082%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&amp;sdata=H8glBNYyfuL96YJSNM0x6cRTJOJKqxmAPtrC%2BivXJ4Y%3D&amp;reserved=0" originalSrc="http://www.avg.com/email-signature?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=emailclient" shash="iopLkM765A/0mcLdxAcUddutpwgA8Nxr2/65tw14Yzb1g5IQoeXzZNPr2t5OzcSD7nrJlGpNuQB3GMvlzezxJcjxZoNRvWiGOFkDuvp19qYq5g2aHmXoAUgkdfqCC7gtT1ZLtt4zyRTdx0aAplFtDxhsFJgUpHktCq/eceDbs1w=" originalsrc="http://www.avg.com/email-signature?utm_medium=email&amp;utm_source=link&amp;utm_campaign=sig-email&amp;utm_content=emailclient" shash="ZsOeXRL+VtDZC4Ej/QEyEkhjk5U5kt/UCmbW3+Rzg4LG4/XeJFfsRwYMhWKqC9p4v74O4mINgwc6ZfY7SZy1RnHaWOMbIdjpVSwRqMYc8E4173O+XcT9KpyTRajpfSJtVFWunC6Awlmzx259rI4vVy2F7XGP6beJnKu00I6jyxQ=" originalsrc="http://www.avg.com/email-signature?utm_medium=email&amp;utm_source=link&amp;utm_campaign=sig-email&amp;utm_content=emailclient" shash="fVTq5XTZeJnauSnaCDOH2nZA6zkSryLd/Av/ehDBqzGwMoZXXJTltrVGnX7c9smT9cCrTgIUtjCWI4vAeV4HUKZ/Y/AejsEl387J0wOZ0MdPfR9juhBpLaP2cjD3l6ryRu0kZgO3jtqxwKkZP4LKnLhKccY+g6vpJEhtpJJnhoE=" target="_blank" style="color:#4453ea">
www.avg.com</a> </td>
</tr>
</tbody>
</table>
</div>
</div>
</div>
</div>
</blockquote>
</blockquote>
</div>
</div>
</blockquote>
</div>
</div>
</body>
</html>