7 commits

Author	SHA1	Message	Date
Alexey Vakhov	7f6bb2d86d	Tests :if option of force_ssl method	2012-04-01 09:44:49 +04:00
Pat Allan	ab838900f8	SSL should not be disabled by default in any environment.	2012-02-23 13:25:13 +00:00
Ryan McGeary	6efb849b32	Fixed force_ssl redirects to include original query params ... `ActionController.force_ssl` redirects http URLs to their https equivalent; however, when a URL contains a query string, the resulting redirect lacked the original query string. Conflicts: actionpack/lib/action_controller/metal/force_ssl.rb	2012-02-07 13:28:29 -05:00
Carlos Antonio da Silva	1b4edd173d	Use performed? instead of checking for response_body ... * Check for performed? instead of response_body * Change performed? to return a boolean * Refactor AC::Metal#response_body= to reuse variable	2012-01-19 18:25:52 -02:00
Marcin Bunsch and Przemek Dąbek	321dae5dcc	When force redirecting to SSL, make sure that the session is kept. As we're moving from a non-secure to secure environment, it's safe	2012-01-12 20:31:23 +01:00
Ben Scheirman	d68f27e9b1	accept optional :host parameter to force_ssl	2011-10-08 18:38:02 -05:00
Prem Sichanugrist	7cbdfa8303	Add controller-specific force_ssl method to force web browser to use HTTPS protocol ... This would become useful for site which sometime transferring sensitive information such as account information on particular controller or action. This featured was requested by DHH.	2011-03-28 04:58:47 +08:00