aboutsummaryrefslogtreecommitdiffstats
path: root/actionpack/test/controller/force_ssl_test.rb
Commit message (Collapse)AuthorAgeFilesLines
* Tests :if option of force_ssl methodAlexey Vakhov2012-04-011-0/+23
|
* SSL should not be disabled by default in any environment.Pat Allan2012-02-231-14/+0
|
* Fixed force_ssl redirects to include original query paramsRyan McGeary2012-02-071-0/+6
| | | | | | | | | | `ActionController.force_ssl` redirects http URLs to their https equivalent; however, when a URL contains a query string, the resulting redirect lacked the original query string. Conflicts: actionpack/lib/action_controller/metal/force_ssl.rb
* Use performed? instead of checking for response_bodyCarlos Antonio da Silva2012-01-191-3/+0
| | | | | | * Check for performed? instead of response_body * Change performed? to return a boolean * Refactor AC::Metal#response_body= to reuse variable
* When force redirecting to SSL, make sure that the session is kept. As we're ↵Marcin Bunsch and Przemek Dąbek2012-01-121-1/+37
| | | | moving from a non-secure to secure environment, it's safe
* accept optional :host parameter to force_sslBen Scheirman2011-10-081-1/+21
|
* Add controller-specific `force_ssl` method to force web browser to use HTTPS ↵Prem Sichanugrist2011-03-281-0/+83
protocol This would become useful for site which sometime transferring sensitive information such as account information on particular controller or action. This featured was requested by DHH.