diff --git a/src/Orchard.Web/Modules/Orchard.SecureSocketsLayer/Filters/SecureSocketsLayersFilter.cs b/src/Orchard.Web/Modules/Orchard.SecureSocketsLayer/Filters/SecureSocketsLayersFilter.cs index 01fd90de8..2d760b52c 100644 --- a/src/Orchard.Web/Modules/Orchard.SecureSocketsLayer/Filters/SecureSocketsLayersFilter.cs +++ b/src/Orchard.Web/Modules/Orchard.SecureSocketsLayer/Filters/SecureSocketsLayersFilter.cs @@ -53,7 +53,8 @@ namespace Orchard.SecureSocketsLayer.Filters { // non auth page on a secure canal // nb: needed as the ReturnUrl for LogOn doesn't force the scheme to http, and reuses the current one - if (!secure && request.IsSecureConnection) { + // Also don't force http on ajax requests. + if (!secure && request.IsSecureConnection && !request.IsAjaxRequest()) { var insecureActionUrl = AppendQueryString( request.QueryString, _sslService.InsecureActionUrl(