Adding a property to RequireHttpsAttr to skip the requirement when local

Topics: ASP.NET MVC
Apr 5, 2012 at 4:10 PM

I'd like to send a pull request that adds a bool property to RequireHttpsAttr that specifies whether the HTTPS requirement should be skipped when the request is local.

When dev'ing locally, it's not worth setting up a trash cert for SSL, especially for OSS projects where you wants folks to be able to clone+F5. Every real project I've ever worked on has created its own version of RequireHttpsAttr for just this purpose (see https://github.com/NuGet/NuGetGallery/blob/master/Website/RequireRemoteHttpsAttribute.cs).

I'm trying to be a good OSS citizen by starting the discussion before sending the PR.

Thanks!

Apr 5, 2012 at 4:35 PM

Sounds like a good feature. Lets open an issue in the issue tracker so that it can be triaged for the appropriate release. Not sure if it can make it into RC anymore.