[LUCENE-9227] Make page ready for pure HTTPS

• Type: Sub-task
• Status: Resolved
• Priority: Blocker
• Resolution: Fixed
• Lucene Fields: New
• Assignee: Uwe Schindler
• Reporter: Uwe Schindler
• Created: 16/Feb/20 18:13
• Updated: 28/Aug/22 15:58
• Resolved: 28/Feb/20 22:49

Description

The web page can currently be visited using HTTPS but this brings warning:

• Both search providers create a form that passes USER ENTERED INPUT using no encryption. This is not allowed due to GDPR. We have to fix this asap. It looks like otis search is working with HTTPS (if we change domain name), but the Lucidworks does not
• There were some CSS files loaded with HTTP (fonts from Google - this was fixed)

Once those 2 problems are fixed (I grepped for HTTP and still found many links with HTTP, but looks like no images or scripts or css anymore), I'd like to add a permanent redirect http://lucene.apache.org/ -> https://lucene.apache.org to the htaccess template file.

Issue Links

• relates to: LUCENE-9256 Raise Lucene Webpage's HSTS max-age to 1 year