archive-gh-me/jsbin
1
0
Fork 0
mirror of https://github.com/jsbin/jsbin.git synced 2026-01-25 15:38:56 +00:00
Code Issues Projects Releases Wiki Activity

Redirect insecure connections.

Browse Source
This commit is contained in:
Tom Ashworth 2013-06-19 10:36:14 +01:00
parent 568b5a8da0
commit bb041bface
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
lib/app.js
View File

@ -148,6 +148,14 @@ app.connect = function (callback) {
app.use(middleware.limitContentLength({limit: app.set('max-request-size')}));
app.use(express.cookieParser(app.set('session secret')));
app.use(express.cookieSession({key: 'jsbin', cookie: {maxAge: 365 * 24 * 60 * 60 * 1000}}));
// If we're in SSL mode but an insecure connection comes in, redirect to
// the SSL version (removing any port information)
app.use(function (req, res, next) {
if (app.get('url ssl') && !req.secure) {
return res.redirect('https://' + req.headers.host.replace(/:.*/, '') + req.url);
}
next();
});
app.use(express.urlencoded());
app.use(express.json());
app.use(middleware.csrf({ ignore: ['/', /^\/api\//] }));