[RequireHttps]之后的https如何确保使用非https
[RequireHttps]之后的https如何确保使用非https
提问于 2012-01-25 03:28:24
回答 2
Stack Overflow用户
回答已采纳
发布于 2012-01-25 03:34:06
ASP.NET MVC的RequireHttps只有一个方向。在过去，我只是创建了我自己的FilterAttribute实现，以允许双向旅行：
EnsureHttpsAttribute
public class EnsureHttpsAttribute : FilterAttribute, IAuthorizationFilter
{
public void OnAuthorization(AuthorizationContext filterContext)
{
Verify.NotNull(filterContext, "filterContext");
Verify.True(filterContext.HttpContext.Request.HttpMethod.Equals("GET", StringComparison.OrdinalIgnoreCase), "filterContext");
var request = filterContext.HttpContext.Request;
if (request.Url != null && !request.IsSecureConnection && !request.IsLocal)
filterContext.Result = new RedirectResult("https://" + request.Url.Host + request.RawUrl);
}
}EnsureHttpAttribute
public class EnsureHttpAttribute : FilterAttribute, IAuthorizationFilter
{
public void OnAuthorization(AuthorizationContext filterContext)
{
Verify.NotNull(filterContext, "filterContext");
Verify.True(filterContext.HttpContext.Request.HttpMethod.Equals("GET", StringComparison.OrdinalIgnoreCase), "filterContext");
var request = filterContext.HttpContext.Request;
if (request.Url != null && request.IsSecureConnection)
filterContext.Result = new RedirectResult("http://" + request.Url.Host + request.RawUrl);
}
}虽然上面的实现检查它是否是一个Local请求，并忽略到RequireHttpsAttribute的切换。
Stack Overflow用户
发布于 2012-01-25 03:34:18
我建议你阅读这篇文章：
http://www.codehosting.net/blog/BlogEngine/post/More-fiddling-with-MVC3-and-https.aspx
页面原文内容由Stack Overflow提供。腾讯云小微IT领域专用引擎提供翻译支持
原文链接：
https://stackoverflow.com/questions/8992834
复制相关文章
相似问题
腾讯云开发者
