aboutsummaryrefslogtreecommitdiffstats
path: root/actionpack/lib/action_controller/metal/force_ssl.rb
Commit message (Collapse)AuthorAgeFilesLines
* update documentation and code to use _action callbacksFrancesco Rodriguez2012-12-071-2/+2
|
* Multiple changes to 1,9 hash syntaxAvnerCohen2012-10-271-1/+1
|
* Missing closing tagEllis Berner2012-08-121-1/+1
|
* Extracted redirect logic from ActionController::Force::ClassMethods.force_sslJeremy Friesen2012-05-311-7/+15
| | | | | | | | | | | | | Prior to this patch the existing .force_ssl method handles both defining the filter and handling the logic for performing the redirect. With this patch the logic for redirecting to the HTTPS protocol is separated from the filter logic that determines if a redirect should occur. By separating the two levels of behavior, an instance method for ActionController (i.e. #force_ssl_redirect) is exposed and available for more granular SSL enforcement. Cleaned up indentation.
* Add ActionController::HTTPSantiago Pastorino2012-03-141-1/+1
| | | | | | More info http://edgeguides.rubyonrails.org/api_app.html [Carlos Antonio da Silva & Santiago Pastorino]
* Document the :host option for force_sslAndrew White2012-02-231-0/+1
|
* Update documentation for force_ssl - closes #5023.Andrew White2012-02-231-1/+14
|
* SSL should not be disabled by default in any environment.Pat Allan2012-02-231-1/+1
|
* Fixed force_ssl redirects to include original query paramsRyan McGeary2012-02-071-0/+1
| | | | | | | | | | `ActionController.force_ssl` redirects http URLs to their https equivalent; however, when a URL contains a query string, the resulting redirect lacked the original query string. Conflicts: actionpack/lib/action_controller/metal/force_ssl.rb
* When force redirecting to SSL, make sure that the session is kept. As we're ↵Marcin Bunsch and Przemek Dąbek2012-01-121-0/+1
| | | | moving from a non-secure to secure environment, it's safe
* accept optional :host parameter to force_sslBen Scheirman2011-10-081-2/+5
|
* fix minor spelling mistakes in commentsDmytrii Nagirniak2011-05-231-3/+3
|
* Add controller-specific `force_ssl` method to force web browser to use HTTPS ↵Prem Sichanugrist2011-03-281-0/+35
protocol This would become useful for site which sometime transferring sensitive information such as account information on particular controller or action. This featured was requested by DHH.