rack-ssl-cure 0.0.1

data/Gemfile

@@ -0,0 +1,4 @@
+source :rubygems
+
+gemspec
+

data/README.md

@@ -0,0 +1,24 @@
+Rack::SSL sounded great, right? But now you have customers who are forced to use https and you may be
+experiencing issues from slows pages to redirect loops. The problem is that Rack::SSL sets a header that
+the browser stores for a year and causes the client to auto redirect to https independent of the app or
+the webserver configuration.
+
+Read more here: 
+http://tools.ietf.org/html/draft-hodges-strict-transport-sec-02#page-12
+
+All you have to do is:
+
+Remove your Rack::SSL gem from the Gemfile and any configuration file including your config.ru if needed.
+
+Add the following to the Gemfile:
+
+      gem 'rack-ssl-cure', require: 'rack/ssl_cure'
+
+Add the following to your config.ru:
+
+      run Rack::SSLCure
+
+Check any other configs. Deploy and watch your site speed up, and your customers smile.
+
+TODO:
+  Write the one test. :)

data/lib/rack/ssl_cure.rb

@@ -0,0 +1,13 @@
+module Rack
+  class SSLCure
+    def initialize(app)
+      @app = app
+    end
+
+    def call(env)
+      status, headers, response = @app.call(env)
+      headers.merge!('Strict-Transport-Security' => 'max-age=0')
+      [status, headers, response]
+    end
+  end
+end

data/rack-ssl-cure.gemspec

@@ -0,0 +1,13 @@
+Gem::Specification.new do |s|
+  s.name        = 'rack-ssl-cure'
+  s.author      = 'Paul Hepworth'
+  s.email       = 'paul<dot>hepworth<at>peppyheppy<dot>com'
+  s.version     = '0.0.1'
+  s.homepage    = 'https://github.com/peppyheppy/rack-ssl-cure'
+  s.date        = '2012-05-11'
+  s.summary     = "Cures the damange done by rack-ssl when it set the Strict-Transport-Security header to a year."
+  s.description = ""
+  s.files       = s.files = `git ls-files`.split("\n")
+  s.add_development_dependency "rspec", "2.6.0"
+end
+

metadata

@@ -0,0 +1,60 @@
+--- !ruby/object:Gem::Specification
+name: rack-ssl-cure
+version: !ruby/object:Gem::Version
+  version: 0.0.1
+  prerelease: 
+platform: ruby
+authors:
+- Paul Hepworth
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2012-05-11 00:00:00.000000000Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: rspec
+  requirement: &70367026401160 !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - =
+      - !ruby/object:Gem::Version
+        version: 2.6.0
+  type: :development
+  prerelease: false
+  version_requirements: *70367026401160
+description: ''
+email: paul<dot>hepworth<at>peppyheppy<dot>com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- Gemfile
+- README.md
+- lib/rack/ssl_cure.rb
+- rack-ssl-cure.gemspec
+homepage: https://github.com/peppyheppy/rack-ssl-cure
+licenses: []
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  none: false
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  none: false
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 1.8.15
+signing_key: 
+specification_version: 3
+summary: Cures the damange done by rack-ssl when it set the Strict-Transport-Security
+  header to a year.
+test_files: []