Skip to content

Latest commit

 

History

History
177 lines (127 loc) · 12.6 KB

CHANGELOG.md

File metadata and controls

177 lines (127 loc) · 12.6 KB

Change Log

Full Changelog

Closed issues:

  • HSTS Implementation #92
  • Does not set session cookie as secure #91
  • HSTS and secure cookies w/o redirect? #89
  • ERR_CONNECTION_REFUSED #85
  • Issue with IE only... strict true not working #80

Merged pull requests:

v0.2.9 (2015-07-22)

Full Changelog

Closed issues:

  • Infinite redirects behind AWS ELB #82
  • Issue with Redirects #81
  • POST requests #79
  • How to handle URI::InvalidURIError? #78
  • Cookie session state shared across http and https without disabling force_secure_cookies #58
  • :strict option + AJAX requests #36

Merged pull requests:

  • Add HSTS preload option #84 (gorism)
  • added Nginx behind Load Balancer section to readme #83 (gnitnuj)
  • respect rack.url_scheme header for proxied SSL when HTTP_X_FORWARDED_PROTO blank #77 (grantspeelman)

v0.2.8 (2014-07-18)

Full Changelog

Closed issues:

  • Already encoded url parameters get encoded again when redirecting #75
  • Release new version! <3 #73

Merged pull requests:

v0.2.7 (2014-05-23)

Full Changelog

Fixed bugs:

  • Vertical pipe characters in the URL cause an URI::InvalidURIError #47

Closed issues:

  • Support for ruby 2.0 and Rails 4 #72
  • Running code before redirect not working #70
  • combine strict and non strict behaviour #69
  • Is there a way to combine mutiple only, multiple ignore with strict #68
  • Enforcing won't preserve HTTP methods #65
  • Rack::SslEnforcer options mess up with 'localhost' #64
  • New rubygems release? #60

Merged pull requests:

  • Fixing issue #70 - Running code before redirect not working #71 (abhasg)
  • URI encode before passing to URI object to deal with pathological URIs #67 (tilthouse)
  • Add Ruby 2.1.0 to .travis.yml #66 (salimane)
  • Allow for custom, default, or no body when redirecting #61 (kcm)

v0.2.6 (2013-09-18)

Full Changelog

Closed issues:

  • Allow proc to be called before forcing a redirect #56
  • force internationalization #54
  • Add environment constraints #51
  • @scheme leak across requests #48
  • Regex #46
  • SSL :ignore ignored for routable addresses, but works for static addresses #43
  • SSL-only, HTTP-only, and mixed #39
  • :mixed doesn't allow insecure GET #21
  • Secure cookie flag forced #20

Merged pull requests:

v0.2.5 (2012-11-14)

Full Changelog

Closed issues:

  • SSL-only, HTTP-only, and mixed #38
  • Working on Heroku? #35
  • Redirect not working #34
  • config.middleware.use Rack::SslEnforcer breaks ajax requests #31
  • Apache 2 config? #30
  • hsts => true doesn't work #28
  • Proper Nginx Config #26
  • strict and HSTS are incompatible #8

Merged pull requests:

  • Added some more documentation for nginx - specifically re. passenger #42 (ktopping)
  • fix README typo #41 (juno)
  • Add sinatra/padrino installation instructions. #37 (danpal)
  • Huge cleaning and refactoring #33 (rymai)
  • Rewrite of enforce_ssl? and implementation of new options only_methods and except_methods. #32 (volontarian)
  • Added documentation on nginx/proxy setups #29 (ariejan)

v0.2.4 (2011-09-05)

Full Changelog

v0.2.3 (2011-08-03)

Full Changelog

Merged pull requests:

v0.2.2 (2011-03-13)

Full Changelog

v0.2.1 (2011-02-15)

Full Changelog

v0.2.0 (2010-11-17)

Full Changelog

v0.1.9 (2010-11-17)

Full Changelog

v0.1.8 (2010-09-10)

Full Changelog

v0.1.6 (2010-09-01)

Full Changelog

v0.1.5 (2010-08-31)

Full Changelog

v0.1.4 (2010-08-30)

Full Changelog

v0.1.3 (2010-08-12)

Full Changelog

v0.1.1 (2010-03-18)

Full Changelog

v0.1.0 (2010-03-17)

* This Change Log was automatically generated by github_changelog_generator