Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Fix a force ssl redirection bug that occur when session store disabled. | Taishi Kasuga | 2016-11-22 | 1 | -1/+1 |
| | |||||
* | modernizes hash syntax in actionpack | Xavier Noria | 2016-08-06 | 1 | -4/+4 |
| | |||||
* | applies new string literal convention in actionpack/lib | Xavier Noria | 2016-08-06 | 1 | -3/+3 |
| | | | | | The current code base is not uniform. After some discussion, we have chosen to go with double quotes by default. | ||||
* | Actionpack documentation typos [ci skip] | Tom Kadwill | 2016-04-23 | 1 | -4/+4 |
| | |||||
* | Fix formatting of force_ssl options documentation [ci skip] | Eliot Sykes | 2015-07-19 | 1 | -6/+6 |
| | |||||
* | Revert "Merge pull request #19682 from ↵ | Santiago Pastorino | 2015-04-12 | 1 | -1/+1 |
| | | | | | | | supercaracal/fix_force_ssl_redirection_flash_error" This reverts commit d215620340be7cb29e2aa87aab22da5ec9e6e6a7, reversing changes made to bbbbfe1ac02162ecb5e9a7b560134a3221f129f3. | ||||
* | fix fails to force_ssl_redirection if session_store is disabled | Taishi Kasuga | 2015-04-09 | 1 | -1/+1 |
| | |||||
* | just set the host, no need for another hash allocation / merge! | Aaron Patterson | 2014-08-01 | 1 | -1/+1 |
| | |||||
* | Fix a few typos. [ci skip] | namusyaka | 2013-09-04 | 1 | -1/+1 |
| | |||||
* | Don't reprocess the options hash on every request | Andrew White | 2013-04-27 | 1 | -1/+2 |
| | |||||
* | Add support for extra options to `force_ssl` | Andrew White | 2013-04-25 | 1 | -17/+48 |
| | | | | | | | | This commit adds support for passing additional url options along with a :status option and any of the flash-related options to `redirect_to` (i.e. :flash, :alert & :notice). Closes #7570. | ||||
* | Use `request.fullpath` to build redirect url in `force_ssl` | Andrew White | 2013-04-25 | 1 | -4/+7 |
| | | | | | | | | | | | The `force_ssl` command now builds the redirect url from `request.fullpath`. This ensures that the format is maintained and it doesn't redirect to a route that has the same parameters but is defined earlier in `routes.rb`. Also any optional segments are maintained. Fixes #7528. Fixes #9061. Fixes #10305. | ||||
* | update documentation and code to use _action callbacks | Francesco Rodriguez | 2012-12-07 | 1 | -2/+2 |
| | |||||
* | Multiple changes to 1,9 hash syntax | AvnerCohen | 2012-10-27 | 1 | -1/+1 |
| | |||||
* | Missing closing tag | Ellis Berner | 2012-08-12 | 1 | -1/+1 |
| | |||||
* | Extracted redirect logic from ActionController::Force::ClassMethods.force_ssl | Jeremy Friesen | 2012-05-31 | 1 | -7/+15 |
| | | | | | | | | | | | | | Prior to this patch the existing .force_ssl method handles both defining the filter and handling the logic for performing the redirect. With this patch the logic for redirecting to the HTTPS protocol is separated from the filter logic that determines if a redirect should occur. By separating the two levels of behavior, an instance method for ActionController (i.e. #force_ssl_redirect) is exposed and available for more granular SSL enforcement. Cleaned up indentation. | ||||
* | Add ActionController::HTTP | Santiago Pastorino | 2012-03-14 | 1 | -1/+1 |
| | | | | | | More info http://edgeguides.rubyonrails.org/api_app.html [Carlos Antonio da Silva & Santiago Pastorino] | ||||
* | Document the :host option for force_ssl | Andrew White | 2012-02-23 | 1 | -0/+1 |
| | |||||
* | Update documentation for force_ssl - closes #5023. | Andrew White | 2012-02-23 | 1 | -1/+14 |
| | |||||
* | SSL should not be disabled by default in any environment. | Pat Allan | 2012-02-23 | 1 | -1/+1 |
| | |||||
* | Fixed force_ssl redirects to include original query params | Ryan McGeary | 2012-02-07 | 1 | -0/+1 |
| | | | | | | | | | | `ActionController.force_ssl` redirects http URLs to their https equivalent; however, when a URL contains a query string, the resulting redirect lacked the original query string. Conflicts: actionpack/lib/action_controller/metal/force_ssl.rb | ||||
* | When force redirecting to SSL, make sure that the session is kept. As we're ↵ | Marcin Bunsch and Przemek Dąbek | 2012-01-12 | 1 | -0/+1 |
| | | | | moving from a non-secure to secure environment, it's safe | ||||
* | accept optional :host parameter to force_ssl | Ben Scheirman | 2011-10-08 | 1 | -2/+5 |
| | |||||
* | fix minor spelling mistakes in comments | Dmytrii Nagirniak | 2011-05-23 | 1 | -3/+3 |
| | |||||
* | Add controller-specific `force_ssl` method to force web browser to use HTTPS ↵ | Prem Sichanugrist | 2011-03-28 | 1 | -0/+35 |
protocol This would become useful for site which sometime transferring sensitive information such as account information on particular controller or action. This featured was requested by DHH. |