This module provides a method which will redirect the browser to use HTTPS protocol. This will ensure that user’s sensitive information will be transferred safely over the internet. You should always force the browser to use HTTPS when you’re transferring sensitive information such as user authentication, account information, or credit card information.

Note that if you are really concerned about your application security, you might consider using config.force_ssl in your config file instead. That will ensure all the data transferred via HTTPS protocol and prevent the user from getting their session hijacked when accessing the site over unsecured HTTP protocol.


REDIRECT_OPTIONS = [:status, :flash, :alert, :notice]

URL_OPTIONS = [:protocol, :host, :domain, :subdomain, :port, :path]

ACTION_OPTIONS = [:only, :except, :if, :unless]


Show files where this module is defined (1 file)
Register or log in to add new notes.