I'd love to file an issue on Attlassian, but I always get an error logging in and there's no way around it. I've even created new usernames, but it seems something's cursed. Maybe someone can give me a hand? Anyway..

This function here:
https://github.com/dnnsoftware/Dnn.Platform/blob/012dcf82ea23ebfa2f8484f369b0d15f3c5f7590/DNN%20Platform/Library/Common/Utilities/UrlUtils.cs#L220

It does not honor the SSL offloading header. It should check for this instead of just returning the link in the same url as it's delivered.

Steps to reproduce:

Setup your site with SSL offloading. Links to Edit Content (any popup) will open in http://. This is fine, except if you're serving SSL content it violates the same origin policy (iframe on same domain is blocked if the protocol is different.) This results in a blank popup.

An example of the proper way to do this is in the DNN source code here:

https://github.com/dnnsoftware/Dnn.Platform/blob/012dcf82ea23ebfa2f8484f369b0d15f3c5f7590/DNN%20Platform/Modules/Journal/Components/JournalParser.cs#L55

Thanks as always Sebastian

Hi Cathal,

My username lucasjansrev. I also have a BitBucket username, not sure, but maybe that causes the conflict. It's ljans. The strange thing is I follow all the suggestions when searching for the error "Your account is not yet available in this OnDemand instance" but nothing works.