Fumiaki MATSUSHIMA
bb0186cf55
ActionDispatch::SSL should keep original header's behavior
...
`ActionDispatch::SSL` changes headers to `Hash`.
So some headers will be broken if there are some middlewares
on ActionDispatch::SSL and if it uses `Rack::Utils::HeaderHash`.
2015-06-14 23:20:04 +09:00
Andriel Nuernberg
85e424de6c
Avoid URI parsing
...
This parsing is unecessary once the Request object already has the
needed information.
2014-04-09 14:19:53 -03:00
Yamagishi Kazutoshi
ce89251bb2
Space is not required for Set-Cookie header
2013-07-05 15:40:14 +09:00
Guillermo Iguaran
d6bc2fa5a9
Merge pull request #11069 from ykzts/actiondispatch-ssl-secure-flag-igonore-case
...
Flag cookies as secure with ignore case in ActionDispatch::SSL
2013-06-24 14:24:03 -07:00
Yamagishi Kazutoshi
891fd78cd7
Flag cookies as secure with ignore case in ActionDispatch::SSL
2013-06-24 18:01:30 +09:00
Geoff Buesing
d8bf1f22de
ActionDispatch:SSL: don't include STS header in non-https responses
2013-06-23 20:01:20 -05:00
Andrew White
add4375a60
Allow use of durations for ActionDispatch::SSL configuration
2013-01-04 16:20:23 +00:00
Rafael Mendonça França
6e04a78462
Fix secure cookies when there are more than one space before the secure
...
keyword
2012-03-19 16:31:57 -03:00
Rafael Mendonça França
139bf55b26
Remove exclude option from ActionDispatch::SSL
2012-03-19 16:31:52 -03:00
Rafael Mendonça França
041f4eec39
Some refactoring and update ActionDispatch::SSL code to use the Rack 1.4.x
2012-03-17 13:36:35 -03:00
Rafael Mendonça França
9ec63eb049
Rack::SSL -> ActionDispatch::SSL
2012-03-17 13:36:35 -03:00
