[Bug 58189] New: Bugzilla adds a HTTP redirect when using saved searches

[WineHQ Bugzilla]

http://bugs.winehq.org/show_bug.cgi?id=58189

Bug ID: 58189
           Summary: Bugzilla adds a HTTP redirect when using saved
                    searches
           Product: WineHQ Bugzilla
           Version: unspecified
          Hardware: x86-64
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: bugzilla-unknown
          Assignee: [e-mail]
          Reporter: [e-mail]
                CC: [e-mail]
      Distribution: ---

Created attachment 78493
  --> http://bugs.winehq.org/attachment.cgi?id=78493
Chrome security warning

Using any of the lists on the left side of the Bugzilla page (Task lists /
Saved Searches / etc.) adds a HTTP redirect, which Chrome loudly (but rightly)
complains about.

Cloudflare apparently responds with a HTTP 302 (Found) but gives a new location
with HTTP instead of HTTPS.
http://bugs.winehq.org/buglist.cgi?bug_status=UNCONFIRMED&bug_status=NEW...

Clicking "Continue" in Chrome attempts to connect with HTTP just to be
redirected again with a HTTP 307 (Temporary Redirect) back to HTTP, and on it
goes. It looks like the login cookie might be sent in cleartext.

Somehow, I do eventually end up connecting via HTTPS, but Wireshark confirms
that HTTP connections are being made, before being shut down by Chrome. My DNS
logs show that Chrome does ask for the HTTPS entry in the record so *maybe*
that's how it gets there... I really don't know.

I imagine other areas are affected, not just the lists.