Uploaded image for project: 'Mojang Web Services'
  1. Mojang Web Services
  2. WEB-3046

minecraft.net language redirects use HTTP if no cookies are set

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Awaiting Response
    • Icon: Normal Normal
    • minecraft.net
    • None

      The bug

      When a minecraft.net URL without language (e.g. en-us) as part of the URL path is used, e.g. https://www.minecraft.net/does-not-exist, and no cookie for www.minecraft.net is set, the redirect uses an HTTP (instead of HTTPS) URL as destination.

      Reproduction steps

      1. In your browser delete all cookies for www.minecraft.net (or possibly even all *.minecraft.net cookies)
      2. Open the developer tools of the browser
      3. Open the tab for displaying network traffic
      4. Try opening https://www.minecraft.net/does-not-exist
      5. Look at the HTTP response
        The Location header used for the redirect uses HTTP, e.g. http://www.minecraft.net/de-de/does-not-exist

            mojangweb [Mojang] Web Team
            marcono1234 [Mod] Marcono1234
            Votes:
            1 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: