Project

General

Profile

ActionsLike0

Bug #11631

closed

OpenURI.redirectable? が http -> https の時もfalseを返す

Added by masarakki (masaki yamada) about 9 years ago. Updated about 7 years ago.

Status:
Closed
Target version:
-
[ruby-dev:49316]

Description

コメントによると

https to http redirect is also forbidden intentionally.

It avoids sending secure cookie or referer by non-secure HTTP protocol.

となっていますが、
この変更がされた時にリダイレクト先のチェックでも https を禁止してしまっています。
http to https を禁止する理由は無さそうなんですが、この動作で正しいのでしょうか

Updated by knu (Akinori MUSHA) about 9 years ago

  • Assignee set to akr (Akira Tanaka)

Updated by akr (Akira Tanaka) about 7 years ago

  • Status changed from Open to Closed

fixed at r56085.

ActionsLike0

Also available in: Atom PDF