Adding a property to RequireHttpsAttr to skip the requirement when local

Apr 5, 2012 at 5:10 PM

I'd like to send a pull request that adds a bool property to RequireHttpsAttr that specifies whether the HTTPS requirement should be skipped when the request is local.

When dev'ing locally, it's not worth setting up a trash cert for SSL, especially for OSS projects where you wants folks to be able to clone+F5. Every real project I've ever worked on has created its own version of RequireHttpsAttr for just this purpose (see

I'm trying to be a good OSS citizen by starting the discussion before sending the PR.


Apr 5, 2012 at 5:35 PM

Sounds like a good feature. Lets open an issue in the issue tracker so that it can be triaged for the appropriate release. Not sure if it can make it into RC anymore.