SSL redirect missing #401

Closed
opened 2026-04-05 16:19:34 +02:00 by MrUnknownDE · 0 comments
Owner

Originally created by @cjanz4711 on 8/14/2025

Describe the bug
http://live-statuspage.oneuptime.com does not redirect to https

To Reproduce
Steps to reproduce the behavior:
navigate to the URL

Expected behavior
HTTPS enforcement for all traffic

Screenshots
This was raised as an audit finding by our infosec team
http://123.status.syniti.com/ does not enforce https when returning an error code. (any prefix will work, this is simply a wildcard redirect)

Desktop (please complete the following information):
N/A

Smartphone (please complete the following information):
N/A

Deployment Type
Is this issue on SaaS (at https://oneuptime.com) or self hosted (the version that you deployed on your server)?

Additional context
Add any other context about the problem here.

*Originally created by @cjanz4711 on 8/14/2025* **Describe the bug** http://live-statuspage.oneuptime.com does not redirect to https **To Reproduce** Steps to reproduce the behavior: navigate to the URL **Expected behavior** HTTPS enforcement for all traffic **Screenshots** This was raised as an audit finding by our infosec team http://123.status.syniti.com/ does not enforce https when returning an error code. (any prefix will work, this is simply a wildcard redirect) **Desktop (please complete the following information):** N/A **Smartphone (please complete the following information):** N/A **Deployment Type** Is this issue on SaaS (at https://oneuptime.com) or self hosted (the version that you deployed on your server)? **Additional context** Add any other context about the problem here.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github/oneuptime#401