WP Core hard coded to use http://www.w3.org/1999/xhtml not HTTPS

There isn’t a proper https/SSL variant of the link you have given, so probably, likely you are getting problems when enforcing it – no matter how you do it. I strongly assume that is the reason why the “unsecure” URL is used in the first place.

From comment:

So does this mean it is impossible to have a truly secure dashboard?

Firstly I’d say, the URL you are talking about is more or less documentary. Secondly, if an external source is malicious, then it really doesn’t matter if it is accessed via SSL or not.

Related Posts:

  1. Use a different domain for SSL
  2. Share same domain for wp-admin but for different website
  3. How to get the post editor and media library to respect HTTPS administration mode?
  4. Upgrade to SSL Breaks Admin Dashboard
  5. SSL Partially breaking admin panel and elementor
  6. Why is there an intermediate redirect to https://public-url.org/wp-admin?
  7. FORCE_SSL_ADMIN not working
  8. Too many redirects after added SSL redirect on port 80 virtual host
  9. Have different site location for wp-admin in IIS
  10. Wp-admin loguts me. When sign with Wp_singon
  11. Having SSL enabled on admin, but disabled on post preview and live preview?
  12. Mixed content and expired session issues with SSL and wp-admin
  13. SSL doesn’t deliver parts of WordPress Administration Module
  14. Forcing WordPress Administration onto a separate SSL Host
  15. ‘Too many redirects’ error after changing site URL in WordPress [closed]
  16. Https Website: CSS and JS files load in http and admin page does not load too
  17. Organizing Code in your WordPress Theme's functions.php File?
  18. How to check if a user is in a specific role?
  19. Can I rename the wp-admin folder?
  20. How do I Enqueue styles/scripts on Certain /wp-admin Pages?
  21. Changing Admin Menu Labels
  22. Adding custom columns to custom post types
  23. Adding Fields to the Category, Tag and Custom Taxonomy Edit Screen in the WordPress Admin?
  24. adding custom stylesheet to wp-admin
  25. Can’t change language (only “English (United States)”)
  26. Is there ANY way to remove comments function and section totally?
  27. How to use “menu_order” field for posts?
  28. “Too many redirects” ONLY when trying to access wp-admin page
  29. How to restrict dashboard access to Admins only?
  30. Admin Page Redirect
  31. Disable dragging of meta boxes?
  32. Setting $_SERVER[‘HTTPS’]=’on’ prevents access to wp-admin
  33. Toggle admin metabox based upon chosen page template
  34. Unable to login and wp-login.php redirects to wp-admin%2F&reauth=1?
  35. When moving a WP site, why does wp-admin redirect to old site?
  36. How to disable the “Post Lock/Edit Lock”?
  37. adding the category to the admin column for a custom post type?
  38. How can we make managing lots of pages in WordPress Admin better?
  39. Change page title in admin area
  40. do_shortcode() within Admin Page
  41. How can I control the position in the admin menu of items added by plugins?
  42. Changing the ‘wp-admin’ URL to whatever I want
  43. Unit testing in the WordPress backend (is_admin() is true)
  44. Admin ajax request return 0 with die()
  45. How to prevent access to wp-admin for certain user roles?
  46. How to remove screen options and help links in the admin area?
  47. How to remove the core embed blocks in WordPress 5.6?
  48. How to increase the file size limit for media uploads?
  49. Create WP tutorial for users with admin pointer using next button for navigation
  50. I’m getting a 404 message when I try to access wpadmin
  51. Taxonomy dropdown metabox in the back-end
  52. wordpress wp-admin css not loading
  53. Sort admin menu items
  54. How to order by post meta name in wp admin?
  55. How set defaults on wpLink()
  56. Remove dashboard, use Pages tab as default
  57. How to redirect/rewrite all /wp-login requests
  58. Show all post tags on post edit screen/sidebox
  59. How to hook in and modify the new revisions UI (3.6+)?
  60. How to display a static HTML page while setting up a WordPress site?
  61. Limit widget to certain sidebar?
  62. How can I uninstall a language?
  63. Check if user is admin by user ID
  64. My wordpress site gets redirected automatically to the old site any known solution for this?
  65. Best way to present options for home page in admin?
  66. Remove specific items from Quick Edit menu of a Custom Post Type?
  67. How to filter by post-format in admin?
  68. Unable to login to my wordpress site. reauth=1 redirection loop
  69. Add “external” link to admin menu in the backend
  70. How to Layer 7 Load Balance WordPress Backend and Frontend?
  71. Disable image attachment links
  72. How can I improve the line break handling in the WYSIWYG editor?
  73. wp_list_tables bulk actions
  74. Custom column for changing post status via ajax
  75. How do I change the login logo URL and hover title?
  76. Custom login redirects to wp-admin on wrong password
  77. How to remove comments option from wp-admin bar and modify profile icon
  78. Remove “Time to upgrade” message from dashboard
  79. Add header and footer to WP backend
  80. js error on post editing page
  81. How to search post by ID in wp-admin
  82. Remove ‘Custom..’ option in tinyMCE colour swatch
  83. sortable custom column in media library
  84. How to add a custom metabox to the Menu Management admin screen?
  85. how do I force a single column layout in screen layout
  86. How can I enable Google Analytics on a file download link?
  87. What is the best method to close off the backend?
  88. How to add custom submenu links in wp-admin menus?
  89. How to list ALL Pages in the dashboard?
  90. .htaccess in wp-admin produces a redirect loop
  91. Change Login URL Without Plugin
  92. Highlight custom widgets in the admin area?
  93. Make fonts.com font work in TinyMCE (iframe referrer issue)
  94. How to Remove All Admin Bar Menu Items?
  95. Uploading Images in the Link Manager
  96. How can I make a Live Demo of my Premium Plugin? Are there security risks?
  97. How to allow users login to WP from external domain and make REST requests
  98. How to change the wording in wp-admin back-end?
  99. Disable wp-admin console for subscribers
  100. Pre-fill fields with content from outside when creating a new post
Hata!: SQLSTATE[HY000] [1045] Access denied for user 'divattrend_liink'@'localhost' (using password: YES)