PrestaShop/PrestaShop — pull request #2278 by M-Mommsen (2014-11-17 10:56:52+00:00)
Title: Display of CMS from Checkout page is not working

When using ajax (fancybox for example) to display content pages on SSL secured checkout page, the page should NOT get redirected to non-ssl.
My suggestion is to either generally allow ssl for cms (why not ?) , or to include at least some content like revokation into the list of exceptions.
i.e.
if (Configuration::get('PS_SSL_ENABLED') && Tools::getValue('content_only'))
or
if (Configuration::get('PS_SSL_ENABLED') && Tools::getValue('content_only') && ( Tools::getValue('id_cms') == (int)Configuration::get('PS_CONDITIONS_CMS_ID') || Tools::getValue('id_cms') == (int)Configuration::get('LEGAL_CMS_ID_REVOCATION' ) ) && Validate::isLoadedObject($this->cms))

This is rather important, because it´s a legal requirement to show the revokation information in germany, and I think it is in the whole EU, too.