rack-ssl-enforcer 0.2.2 → 0.2.3

data/README.rdoc

@@ -1,8 +1,9 @@
 = Rack::SslEnforcer
 
-Rack::SslEnforcer is a simple Rack middleware to enforce ssl connections. As of Version 0.2.0, Rack::SslEnforcer marks
+Rack::SslEnforcer is a simple Rack middleware to enforce SSL connections. As of Version 0.2.0, Rack::SslEnforcer marks
 Cookies as secure by default (HSTS must be set manually).
-Tested on Ruby 1.8.7 & 1.9.2
+
+Tested on Ruby 1.8.7, 1.9.2, REE, JRuby and Rubinius.
 
 == Installation
 
@@ -19,7 +20,7 @@ Or, if you are using Bundler, just add this to your Gemfile:
   gem 'rack-ssl-enforcer'
 
 To use Rack::SslEnforcer in your Rails application, add the following line to your application
-config file (config/application.rb for Rails3, config/environment.rb for Rails2):
+config file (<tt>config/application.rb</tt> for Rails 3, <tt>config/environment.rb</tt> for Rails 2):
 
   config.middleware.use Rack::SslEnforcer
 
@@ -38,7 +39,7 @@ You can also define specific regex patterns or paths or hosts to redirect.
   config.middleware.use Rack::SslEnforcer, :only => "/login"
   config.middleware.use Rack::SslEnforcer, :only => ["/login", /\.xml$/]
   config.middleware.use Rack::SslEnforcer, :only_hosts => 'api.example.com'
-  config.middleware.use Rack::SslEnforcer, :only_hosts => ["[www|api]\.example\.org", 'example.com']
+  config.middleware.use Rack::SslEnforcer, :only_hosts => [/[www|api]\.example\.org$/, 'example.com']
   config.middleware.use Rack::SslEnforcer, :except_hosts => 'help.example.com'
   config.middleware.use Rack::SslEnforcer, :except_hosts => /[help|blog]\.example\.com$/
 
@@ -49,9 +50,9 @@ Use the :strict option to force http for all requests not matching your :only sp
   config.middleware.use Rack::SslEnforcer, :only => ["/login", /\.xml$/], :strict => true
   config.middleware.use Rack::SslEnforcer, :only_hosts => 'api.example.com', :strict => true
 
-Or in the case where you have matching urls with different methods (rails restful routes: get#users post#users || get#user/:id put#user/:id) you may need to post and put to secure but redirect to http on get.
+Or in the case where you have matching urls with different methods (Rails RESTful routes: get#users post#users || get#user/:id put#user/:id) you may need to post and put to secure but redirect to http on get.
 
-  config.middleware.use Rack::SslEnforcer, :only => [/^\/users\/(.+)\/edit/], :mixed => true
+  config.middleware.use Rack::SslEnforcer, :only => [%r{^/users/}], :mixed => true
 
 The above will allow you to post/put from the secure/non-secure urls keeping the original schema.
 
@@ -60,6 +61,18 @@ To set HSTS expiry and subdomain inclusion (defaults: one year, true). Strict op
   config.middleware.use Rack::SslEnforcer, :hsts => { :expires => 500, :subdomains => false }
   config.middleware.use Rack::SslEnforcer, :hsts => true # equivalent to { :expires => 31536000, :subdomains => true }
 
+Finally you might want to share a cookie based session between http and https.
+This is not possible by default with Rack::SslEnforcer for security reasons.
+See: [http://en.wikipedia.org/wiki/HTTP_cookie#Cookie_theft_and_session_hijacking]
+
+Nevertheless, you can set the option :force_secure_cookies to false in order to be able to share a cookie based session between http and https:
+
+  config.middleware.use Rack::SslEnforcer, :only => "/login", :force_secure_cookies => false
+
+But be aware that if you do so, you have to make sure that the content of you cookie is encoded.
+This can be done using a coder with Rack::Session::Cookie.
+See: [https://github.com/rack/rack/blob/master/lib/rack/session/cookie.rb#L28-42]
+
 
 == TODO
 

data/lib/rack/ssl-enforcer.rb

@@ -1,8 +1,23 @@
 module Rack
   class SslEnforcer
 
-    def initialize(app, options = {})
-      @app, @options = app, options
+    # Warning: If you set the option force_secure_cookies to false, make sure that your cookies
+    #  are encoded and that you understand the consequences (see documentation)
+    def initialize(app, options={})
+      default_options = {
+        :redirect_to => nil,
+        :only => nil,
+        :only_hosts => nil,
+        :except => nil,
+        :except_hosts => nil,
+        :strict => false,
+        :mixed => false,
+        :hsts => nil,
+        :http_port => nil,
+        :https_port => nil,
+        :force_secure_cookies => true
+      }
+      @app, @options = app, default_options.merge(options)
     end
 
     def call(env)
@@ -14,12 +29,12 @@ module Rack
       end
 
       if scheme
-        location = replace_scheme(@req, scheme).url
+        location = replace_scheme(@req, scheme)
         body     = "<html><body>You are being <a href=\"#{location}\">redirected</a>.</body></html>"
         [301, { 'Content-Type' => 'text/html', 'Location' => location }, [body]]
       elsif ssl_request?(env)
         status, headers, body = @app.call(env)
-        flag_cookies_as_secure!(headers)
+        flag_cookies_as_secure!(headers) if @options[:force_secure_cookies]
         set_hsts_headers!(headers) if @options[:hsts] && !@options[:strict]
         [status, headers, body]
       else
@@ -75,7 +90,7 @@ module Rack
     end
 
     def enforce_ssl_for?(keys, req)
-      if keys.any? {|option| @options.key?(option)}
+      if keys.any? { |option| @options[option] }
         keys.any? do |key|
           rules = [@options[key]].flatten.compact
           unless rules.empty?
@@ -92,9 +107,9 @@ module Rack
     def enforce_ssl?(req)
       path_keys = [:only, :except]
       hosts_keys = [:only_hosts, :except_hosts]
-      if hosts_keys.any? {|option| @options.key?(option)}
+      if hosts_keys.any? { |option| @options[option] }
         if enforce_ssl_for?(hosts_keys, req)
-          if path_keys.any? {|option| @options.key?(option)}
+          if path_keys.any? { |option| @options[option] }
             enforce_ssl_for?(path_keys, req)
           else
             true
@@ -102,7 +117,7 @@ module Rack
         else
           false
         end
-      elsif path_keys.any? {|option| @options.key?(option)}
+      elsif path_keys.any? { |option| @options[option] }
         enforce_ssl_for?(path_keys, req)
       else
         true
@@ -116,35 +131,38 @@ module Rack
       else
         uri = nil
       end
-      Rack::Request.new(req.env.merge(
-        'rack.url_scheme' => scheme,
-        'HTTP_X_FORWARDED_PROTO' => scheme,
-        'HTTP_X_FORWARDED_PORT' => port_for(scheme).to_s,
-        'SERVER_PORT' => port_for(scheme).to_s
-      ).merge(uri ? {'HTTP_HOST' => uri} : {}))
+      host = uri || req.host
+      port = port_for(scheme).to_s
+
+      URI.parse("#{scheme}://#{host}:#{port}#{req.fullpath}").to_s
     end
 
     def port_for(scheme)
-      scheme == 'https' ? 443 : 80
+      if scheme == 'https'
+        @options[:https_port] || 443
+      else
+        @options[:http_port] || 80
+      end
     end
 
-    # see http://en.wikipedia.org/wiki/HTTP_cookie#Cookie_hijacking
+    # see http://en.wikipedia.org/wiki/HTTP_cookie#Cookie_theft_and_session_hijacking
     def flag_cookies_as_secure!(headers)
       if cookies = headers['Set-Cookie']
-        headers['Set-Cookie'] = cookies.split("\n").map { |cookie|
-          if cookie !~ / secure;/
-            "#{cookie}; secure"
-          else
-            cookie
-          end
-        }.join("\n")
+        # Support Rails 2.3 / Rack 1.1 arrays as headers
+        unless cookies.is_a?(Array)
+          cookies = cookies.split("\n")
+        end
+
+        headers['Set-Cookie'] = cookies.map do |cookie|
+          cookie !~ / secure;/ ? "#{cookie}; secure" : cookie
+        end.join("\n")
       end
     end
 
     # see http://en.wikipedia.org/wiki/Strict_Transport_Security
     def set_hsts_headers!(headers)
       opts = { :expires => 31536000, :subdomains => true }
-      opts.merge!(@options[:hsts]) if @options[:hsts].is_a? Hash
+      opts.merge!(@options[:hsts])
       value  = "max-age=#{opts[:expires]}"
       value += "; includeSubDomains" if opts[:subdomains]
       headers.merge!({ 'Strict-Transport-Security' => value })

data/lib/rack/ssl-enforcer.rbc

@@ -0,0 +1,3679 @@
+!RBIX
+10937318184790222022
+x
+M
+1
+n
+n
+x
+10
+__script__
+i
+28
+99
+7
+0
+65
+49
+1
+2
+13
+99
+12
+7
+2
+12
+7
+3
+12
+65
+12
+49
+4
+4
+15
+49
+2
+0
+15
+2
+11
+I
+6
+I
+0
+I
+0
+I
+0
+n
+p
+5
+x
+4
+Rack
+x
+11
+open_module
+x
+15
+__module_init__
+M
+1
+n
+n
+x
+4
+Rack
+i
+29
+5
+66
+99
+7
+0
+1
+65
+49
+1
+3
+13
+99
+12
+7
+2
+12
+7
+3
+12
+65
+12
+49
+4
+4
+15
+49
+2
+0
+11
+I
+6
+I
+0
+I
+0
+I
+0
+n
+p
+5
+x
+11
+SslEnforcer
+x
+10
+open_class
+x
+14
+__class_init__
+M
+1
+n
+n
+x
+11
+SslEnforcer
+i
+174
+5
+66
+99
+7
+0
+7
+1
+65
+67
+49
+2
+0
+49
+3
+4
+15
+99
+7
+4
+7
+5
+65
+67
+49
+2
+0
+49
+3
+4
+15
+5
+48
+6
+15
+99
+7
+7
+7
+8
+65
+67
+49
+2
+0
+49
+3
+4
+15
+99
+7
+9
+7
+10
+65
+67
+49
+2
+0
+49
+3
+4
+15
+99
+7
+11
+7
+12
+65
+67
+49
+2
+0
+49
+3
+4
+15
+99
+7
+13
+7
+14
+65
+67
+49
+2
+0
+49
+3
+4
+15
+99
+7
+15
+7
+16
+65
+67
+49
+2
+0
+49
+3
+4
+15
+99
+7
+17
+7
+18
+65
+67
+49
+2
+0
+49
+3
+4
+15
+99
+7
+19
+7
+20
+65
+67
+49
+2
+0
+49
+3
+4
+15
+99
+7
+21
+7
+22
+65
+67
+49
+2
+0
+49
+3
+4
+15
+99
+7
+23
+7
+24
+65
+67
+49
+2
+0
+49
+3
+4
+15
+99
+7
+25
+7
+26
+65
+67
+49
+2
+0
+49
+3
+4
+11
+I
+5
+I
+0
+I
+0
+I
+0
+n
+p
+27
+x
+10
+initialize
+M
+1
+n
+n
+x
+10
+initialize
+i
+146
+23
+1
+10
+14
+44
+43
+0
+78
+49
+1
+1
+19
+1
+15
+44
+43
+0
+4
+9
+49
+1
+1
+13
+7
+2
+1
+49
+3
+2
+15
+13
+7
+4
+1
+49
+3
+2
+15
+13
+7
+5
+1
+49
+3
+2
+15
+13
+7
+6
+1
+49
+3
+2
+15
+13
+7
+7
+1
+49
+3
+2
+15
+13
+7
+8
+3
+49
+3
+2
+15
+13
+7
+9
+3
+49
+3
+2
+15
+13
+7
+10
+1
+49
+3
+2
+15
+13
+7
+11
+2
+49
+3
+2
+15
+19
+2
+15
+20
+0
+20
+2
+20
+1
+49
+12
+1
+17
+2
+38
+13
+15
+38
+14
+15
+2
+15
+20
+1
+7
+11
+49
+15
+1
+3
+83
+16
+9
+144
+99
+43
+17
+7
+18
+49
+15
+1
+7
+19
+64
+49
+20
+1
+8
+145
+1
+11
+I
+7
+I
+3
+I
+1
+I
+2
+n
+p
+21
+x
+4
+Hash
+x
+16
+new_from_literal
+x
+11
+redirect_to
+x
+3
+[]=
+x
+4
+only
+x
+10
+only_hosts
+x
+6
+except
+x
+12
+except_hosts
+x
+6
+strict
+x
+5
+mixed
+x
+4
+hsts
+x
+20
+force_secure_cookies
+x
+5
+merge
+x
+4
+@app
+x
+8
+@options
+x
+2
+[]
+x
+2
+==
+x
+7
+Globals
+x
+7
+$stderr
+s
+157
+WARN -- : The option :force_secure_cookies is set to false so make sure your cookies are encoded and that you understand the consequences (see documentation)
+x
+4
+puts
+p
+29
+I
+-1
+I
+4
+I
+e
+I
+f
+I
+17
+I
+6
+I
+1f
+I
+7
+I
+27
+I
+8
+I
+2f
+I
+9
+I
+37
+I
+a
+I
+3f
+I
+b
+I
+47
+I
+c
+I
+4f
+I
+d
+I
+57
+I
+e
+I
+5e
+I
+5
+I
+61
+I
+10
+I
+74
+I
+11
+I
+92
+x
+85
+/Users/remy/Development/Ruby/Gems/tobmatth/rack-ssl-enforcer/lib/rack/ssl-enforcer.rb
+p
+3
+x
+3
+app
+x
+7
+options
+x
+15
+default_options
+x
+17
+method_visibility
+x
+15
+add_defn_method
+x
+4
+call
+M
+1
+n
+n
+x
+4
+call
+i
+296
+45
+0
+1
+43
+2
+13
+71
+3
+47
+9
+25
+47
+49
+4
+0
+13
+20
+0
+47
+49
+5
+1
+15
+8
+30
+20
+0
+49
+3
+1
+38
+6
+15
+5
+39
+6
+47
+49
+7
+1
+13
+9
+57
+15
+5
+20
+0
+47
+49
+8
+1
+10
+56
+2
+8
+57
+3
+9
+78
+5
+20
+0
+47
+49
+9
+1
+9
+71
+1
+8
+76
+7
+10
+64
+19
+1
+8
+117
+5
+20
+0
+47
+49
+9
+1
+13
+9
+107
+15
+39
+11
+7
+12
+49
+13
+1
+13
+10
+107
+15
+5
+20
+0
+47
+49
+8
+1
+9
+116
+7
+14
+64
+19
+1
+8
+117
+1
+15
+20
+1
+9
+189
+5
+39
+6
+20
+1
+47
+49
+15
+2
+49
+16
+0
+19
+2
+15
+7
+17
+20
+2
+47
+101
+18
+7
+19
+63
+3
+19
+3
+15
+7
+20
+44
+43
+21
+80
+49
+22
+1
+13
+7
+23
+64
+7
+24
+64
+49
+25
+2
+15
+13
+7
+26
+64
+20
+2
+49
+25
+2
+15
+20
+3
+35
+1
+35
+3
+8
+295
+5
+20
+0
+47
+49
+9
+1
+9
+288
+39
+27
+20
+0
+49
+28
+1
+97
+37
+19
+4
+15
+37
+19
+5
+15
+37
+19
+3
+15
+15
+2
+15
+39
+11
+7
+29
+49
+13
+1
+9
+239
+5
+20
+5
+47
+49
+30
+1
+8
+240
+1
+15
+39
+11
+7
+31
+49
+13
+1
+13
+9
+265
+15
+39
+11
+7
+12
+49
+13
+1
+10
+264
+2
+8
+265
+3
+9
+276
+5
+20
+5
+47
+49
+32
+1
+8
+277
+1
+15
+20
+4
+20
+5
+20
+3
+35
+3
+8
+295
+39
+27
+20
+0
+49
+28
+1
+11
+I
+b
+I
+6
+I
+1
+I
+1
+n
+p
+33
+x
+4
+Rack
+n
+x
+7
+Request
+x
+3
+new
+x
+8
+allocate
+x
+10
+initialize
+x
+4
+@req
+x
+12
+enforce_ssl?
+x
+16
+enforce_non_ssl?
+x
+12
+ssl_request?
+s
+5
+https
+x
+8
+@options
+x
+6
+strict
+x
+2
+[]
+s
+4
+http
+x
+14
+replace_scheme
+x
+3
+url
+s
+35
+<html><body>You are being <a href="
+x
+4
+to_s
+s
+31
+">redirected</a>.</body></html>
+I
+12d
+x
+4
+Hash
+x
+16
+new_from_literal
+s
+12
+Content-Type
+s
+9
+text/html
+x
+3
+[]=
+s
+8
+Location
+x
+4
+@app
+x
+4
+call
+x
+20
+force_secure_cookies
+x
+23
+flag_cookies_as_secure!
+x
+4
+hsts
+x
+17
+set_hsts_headers!
+p
+35
+I
+-1
+I
+14
+I
+0
+I
+15
+I
+21
+I
+17
+I
+3b
+I
+18
+I
+4e
+I
+19
+I
+6d
+I
+1a
+I
+74
+I
+19
+I
+76
+I
+1d
+I
+7a
+I
+1e
+I
+89
+I
+1f
+I
+97
+I
+20
+I
+bd
+I
+21
+I
+c6
+I
+22
+I
+dd
+I
+23
+I
+f1
+I
+24
+I
+116
+I
+25
+I
+120
+I
+27
+I
+128
+x
+85
+/Users/remy/Development/Ruby/Gems/tobmatth/rack-ssl-enforcer/lib/rack/ssl-enforcer.rb
+p
+6
+x
+3
+env
+x
+6
+scheme
+x
+8
+location
+x
+4
+body
+x
+6
+status
+x
+7
+headers
+x
+7
+private
+x
+16
+enforce_non_ssl?
+M
+1
+n
+n
+x
+16
+enforce_non_ssl?
+i
+37
+39
+0
+7
+1
+49
+2
+1
+13
+9
+36
+15
+7
+3
+64
+7
+4
+64
+35
+2
+20
+0
+7
+5
+64
+49
+2
+1
+49
+6
+1
+10
+35
+2
+8
+36
+3
+11
+I
+4
+I
+1
+I
+1
+I
+1
+n
+p
+7
+x
+8
+@options
+x
+5
+mixed
+x
+2
+[]
+s
+4
+POST
+s
+3
+PUT
+s
+14
+REQUEST_METHOD
+x
+8
+include?
+p
+5
+I
+-1
+I
+2d
+I
+0
+I
+2e
+I
+25
+x
+85
+/Users/remy/Development/Ruby/Gems/tobmatth/rack-ssl-enforcer/lib/rack/ssl-enforcer.rb
+p
+1
+x
+3
+env
+x
+12
+ssl_request?
+M
+1
+n
+n
+x
+12
+ssl_request?
+i
+13
+5
+20
+0
+47
+49
+0
+1
+7
+1
+64
+83
+2
+11
+I
+3
+I
+1
+I
+1
+I
+1
+n
+p
+3
+x
+6
+scheme
+s
+5
+https
+x
+2
+==
+p
+5
+I
+-1
+I
+31
+I
+0
+I
+32
+I
+d
+x
+85
+/Users/remy/Development/Ruby/Gems/tobmatth/rack-ssl-enforcer/lib/rack/ssl-enforcer.rb
+p
+1
+x
+3
+env
+x
+6
+scheme
+M
+1
+n
+n
+x
+6
+scheme
+i
+59
+20
+0
+7
+0
+64
+49
+1
+1
+7
+2
+64
+83
+3
+9
+20
+7
+4
+64
+8
+58
+20
+0
+7
+5
+64
+49
+1
+1
+9
+50
+20
+0
+7
+5
+64
+49
+1
+1
+7
+6
+64
+49
+7
+1
+78
+49
+1
+1
+8
+58
+20
+0
+7
+8
+64
+49
+1
+1
+11
+I
+3
+I
+1
+I
+1
+I
+1
+n
+p
+9
+s
+5
+HTTPS
+x
+2
+[]
+s
+2
+on
+x
+2
+==
+s
+5
+https
+s
+22
+HTTP_X_FORWARDED_PROTO
+s
+1
+,
+x
+5
+split
+s
+15
+rack.url_scheme
+p
+13
+I
+-1
+I
+36
+I
+0
+I
+37
+I
+f
+I
+38
+I
+14
+I
+39
+I
+1e
+I
+3a
+I
+32
+I
+3c
+I
+3b
+x
+85
+/Users/remy/Development/Ruby/Gems/tobmatth/rack-ssl-enforcer/lib/rack/ssl-enforcer.rb
+p
+1
+x
+3
+env
+x
+8
+matches?
+M
+1
+n
+n
+x
+8
+matches?
+i
+235
+20
+1
+45
+0
+1
+49
+2
+1
+9
+116
+20
+0
+13
+7
+3
+12
+49
+4
+1
+9
+34
+15
+20
+2
+49
+5
+0
+20
+1
+49
+6
+1
+8
+114
+13
+7
+7
+12
+49
+4
+1
+9
+62
+15
+20
+2
+49
+5
+0
+20
+1
+49
+6
+1
+10
+59
+2
+8
+60
+3
+8
+114
+13
+7
+8
+12
+49
+4
+1
+9
+84
+15
+20
+2
+49
+9
+0
+20
+1
+49
+6
+1
+8
+114
+13
+7
+10
+12
+49
+4
+1
+9
+112
+15
+20
+2
+49
+9
+0
+20
+1
+49
+6
+1
+10
+109
+2
+8
+110
+3
+8
+114
+15
+1
+8
+234
+20
+0
+13
+7
+3
+12
+49
+4
+1
+9
+148
+15
+20
+2
+49
+5
+0
+78
+20
+1
+49
+11
+0
+49
+12
+2
+20
+1
+83
+13
+8
+234
+13
+7
+7
+12
+49
+4
+1
+9
+184
+15
+20
+2
+49
+5
+0
+78
+20
+1
+49
+11
+0
+49
+12
+2
+20
+1
+83
+13
+10
+181
+2
+8
+182
+3
+8
+234
+13
+7
+8
+12
+49
+4
+1
+9
+205
+15
+20
+2
+49
+9
+0
+20
+1
+83
+13
+8
+234
+13
+7
+10
+12
+49
+4
+1
+9
+232
+15
+20
+2
+49
+9
+0
+20
+1
+83
+13
+10
+229
+2
+8
+230
+3
+8
+234
+15
+1
+11
+I
+6
+I
+3
+I
+3
+I
+3
+n
+p
+14
+x
+6
+Regexp
+n
+x
+5
+is_a?
+x
+4
+only
+x
+3
+===
+x
+4
+path
+x
+2
+=~
+x
+6
+except
+x
+10
+only_hosts
+x
+4
+host
+x
+12
+except_hosts
+x
+6
+length
+x
+2
+[]
+x
+2
+==
+p
+45
+I
+-1
+I
+40
+I
+0
+I
+41
+I
+a
+I
+42
+I
+c
+I
+43
+I
+16
+I
+44
+I
+22
+I
+45
+I
+2c
+I
+46
+I
+3e
+I
+47
+I
+48
+I
+48
+I
+54
+I
+49
+I
+5e
+I
+4a
+I
+71
+I
+42
+I
+74
+I
+4d
+I
+76
+I
+4e
+I
+80
+I
+4f
+I
+94
+I
+50
+I
+9e
+I
+51
+I
+b8
+I
+52
+I
+c2
+I
+53
+I
+cd
+I
+54
+I
+d7
+I
+55
+I
+e9
+I
+4d
+I
+eb
+x
+85
+/Users/remy/Development/Ruby/Gems/tobmatth/rack-ssl-enforcer/lib/rack/ssl-enforcer.rb
+p
+3
+x
+3
+key
+x
+7
+pattern
+x
+3
+req
+x
+16
+enforce_ssl_for?
+M
+1
+n
+n
+x
+16
+enforce_ssl_for?
+i
+20
+20
+0
+56
+0
+50
+1
+0
+9
+18
+20
+0
+56
+2
+50
+1
+0
+8
+19
+3
+11
+I
+4
+I
+2
+I
+2
+I
+2
+n
+p
+3
+M
+1
+p
+2
+x
+9
+for_block
+t
+n
+x
+16
+enforce_ssl_for?
+i
+12
+57
+19
+0
+15
+39
+0
+20
+0
+49
+1
+1
+11
+I
+4
+I
+1
+I
+1
+I
+1
+n
+p
+2
+x
+8
+@options
+x
+2
+[]
+p
+3
+I
+0
+I
+5b
+I
+c
+x
+85
+/Users/remy/Development/Ruby/Gems/tobmatth/rack-ssl-enforcer/lib/rack/ssl-enforcer.rb
+p
+1
+x
+6
+option
+x
+4
+any?
+M
+1
+p
+2
+x
+9
+for_block
+t
+n
+x
+16
+enforce_ssl_for?
+i
+66
+57
+19
+0
+15
+39
+0
+20
+0
+49
+1
+1
+35
+1
+49
+2
+0
+49
+3
+0
+19
+1
+15
+20
+1
+49
+4
+0
+9
+32
+1
+8
+65
+20
+1
+20
+0
+7
+5
+83
+6
+13
+10
+50
+15
+20
+0
+7
+7
+83
+6
+9
+57
+7
+8
+64
+8
+60
+7
+9
+64
+56
+10
+50
+11
+1
+11
+I
+6
+I
+2
+I
+1
+I
+1
+n
+p
+12
+x
+8
+@options
+x
+2
+[]
+x
+7
+flatten
+x
+7
+compact
+x
+6
+empty?
+x
+12
+except_hosts
+x
+2
+==
+x
+6
+except
+s
+4
+all?
+s
+4
+any?
+M
+1
+p
+2
+x
+9
+for_block
+t
+n
+x
+16
+enforce_ssl_for?
+i
+18
+57
+19
+0
+15
+5
+21
+1
+0
+20
+0
+21
+2
+1
+47
+49
+0
+3
+11
+I
+6
+I
+1
+I
+1
+I
+1
+n
+p
+1
+x
+8
+matches?
+p
+5
+I
+0
+I
+5f
+I
+4
+I
+60
+I
+12
+x
+85
+/Users/remy/Development/Ruby/Gems/tobmatth/rack-ssl-enforcer/lib/rack/ssl-enforcer.rb
+p
+1
+x
+7
+pattern
+x
+4
+send
+p
+9
+I
+0
+I
+5c
+I
+4
+I
+5d
+I
+16
+I
+5e
+I
+20
+I
+5f
+I
+42
+x
+85
+/Users/remy/Development/Ruby/Gems/tobmatth/rack-ssl-enforcer/lib/rack/ssl-enforcer.rb
+p
+2
+x
+3
+key
+x
+5
+rules
+p
+9
+I
+-1
+I
+5a
+I
+0
+I
+5b
+I
+9
+I
+5c
+I
+12
+I
+65
+I
+14
+x
+85
+/Users/remy/Development/Ruby/Gems/tobmatth/rack-ssl-enforcer/lib/rack/ssl-enforcer.rb
+p
+2
+x
+4
+keys
+x
+3
+req
+x
+12
+enforce_ssl?
+M
+1
+n
+n
+x
+12
+enforce_ssl?
+i
+86
+7
+0
+7
+1
+35
+2
+19
+1
+15
+7
+2
+7
+3
+35
+2
+19
+2
+15
+20
+2
+56
+4
+50
+5
+0
+9
+64
+5
+20
+2
+20
+0
+47
+49
+6
+2
+9
+61
+20
+1
+56
+7
+50
+5
+0
+9
+58
+5
+20
+1
+20
+0
+47
+49
+6
+2
+8
+59
+2
+8
+62
+3
+8
+85
+20
+1
+56
+8
+50
+5
+0
+9
+84
+5
+20
+1
+20
+0
+47
+49
+6
+2
+8
+85
+2
+11
+I
+6
+I
+3
+I
+1
+I
+1
+n
+p
+9
+x
+4
+only
+x
+6
+except
+x
+10
+only_hosts
+x
+12
+except_hosts
+M
+1
+p
+2
+x
+9
+for_block
+t
+n
+x
+12
+enforce_ssl?
+i
+12
+57
+19
+0
+15
+39
+0
+20
+0
+49
+1
+1
+11
+I
+4
+I
+1
+I
+1
+I
+1
+n
+p
+2
+x
+8
+@options
+x
+2
+[]
+p
+3
+I
+0
+I
+6c
+I
+c
+x
+85
+/Users/remy/Development/Ruby/Gems/tobmatth/rack-ssl-enforcer/lib/rack/ssl-enforcer.rb
+p
+1
+x
+6
+option
+x
+4
+any?
+x
+16
+enforce_ssl_for?
+M
+1
+p
+2
+x
+9
+for_block
+t
+n
+x
+12
+enforce_ssl?
+i
+12
+57
+19
+0
+15
+39
+0
+20
+0
+49
+1
+1
+11
+I
+4
+I
+1
+I
+1
+I
+1
+n
+p
+2
+x
+8
+@options
+x
+2
+[]
+p
+3
+I
+0
+I
+6e
+I
+c
+x
+85
+/Users/remy/Development/Ruby/Gems/tobmatth/rack-ssl-enforcer/lib/rack/ssl-enforcer.rb
+p
+1
+x
+6
+option
+M
+1
+p
+2
+x
+9
+for_block
+t
+n
+x
+12
+enforce_ssl?
+i
+12
+57
+19
+0
+15
+39
+0
+20
+0
+49
+1
+1
+11
+I
+4
+I
+1
+I
+1
+I
+1
+n
+p
+2
+x
+8
+@options
+x
+2
+[]
+p
+3
+I
+0
+I
+76
+I
+c
+x
+85
+/Users/remy/Development/Ruby/Gems/tobmatth/rack-ssl-enforcer/lib/rack/ssl-enforcer.rb
+p
+1
+x
+6
+option
+p
+25
+I
+-1
+I
+69
+I
+0
+I
+6a
+I
+9
+I
+6b
+I
+12
+I
+6c
+I
+1b
+I
+6d
+I
+26
+I
+6e
+I
+2f
+I
+6f
+I
+3a
+I
+71
+I
+3d
+I
+74
+I
+40
+I
+76
+I
+49
+I
+77
+I
+54
+I
+79
+I
+56
+x
+85
+/Users/remy/Development/Ruby/Gems/tobmatth/rack-ssl-enforcer/lib/rack/ssl-enforcer.rb
+p
+3
+x
+3
+req
+x
+9
+path_keys
+x
+10
+hosts_keys
+x
+14
+replace_scheme
+M
+1
+n
+n
+x
+14
+replace_scheme
+i
+287
+39
+0
+7
+1
+49
+2
+1
+9
+46
+45
+3
+4
+39
+0
+7
+1
+49
+2
+1
+49
+5
+1
+19
+2
+15
+20
+2
+80
+49
+2
+1
+13
+10
+42
+15
+20
+2
+4
+5
+49
+2
+1
+19
+2
+8
+49
+1
+19
+2
+15
+45
+6
+7
+43
+8
+13
+71
+9
+47
+9
+178
+47
+49
+10
+0
+13
+20
+0
+49
+11
+0
+44
+43
+12
+4
+4
+49
+13
+1
+13
+7
+14
+64
+20
+1
+49
+15
+2
+15
+13
+7
+16
+64
+20
+1
+49
+15
+2
+15
+13
+7
+17
+64
+5
+20
+1
+47
+49
+18
+1
+49
+19
+0
+49
+15
+2
+15
+13
+7
+20
+64
+5
+20
+1
+47
+49
+18
+1
+49
+19
+0
+49
+15
+2
+15
+49
+21
+1
+20
+2
+9
+161
+44
+43
+12
+79
+49
+13
+1
+13
+7
+22
+64
+20
+2
+49
+15
+2
+15
+8
+168
+44
+43
+12
+78
+49
+13
+1
+49
+21
+1
+47
+49
+23
+1
+15
+8
+286
+20
+0
+49
+11
+0
+44
+43
+12
+4
+4
+49
+13
+1
+13
+7
+14
+64
+20
+1
+49
+15
+2
+15
+13
+7
+16
+64
+20
+1
+49
+15
+2
+15
+13
+7
+17
+64
+5
+20
+1
+47
+49
+18
+1
+49
+19
+0
+49
+15
+2
+15
+13
+7
+20
+64
+5
+20
+1
+47
+49
+18
+1
+49
+19
+0
+49
+15
+2
+15
+49
+21
+1
+20
+2
+9
+273
+44
+43
+12
+79
+49
+13
+1
+13
+7
+22
+64
+20
+2
+49
+15
+2
+15
+8
+280
+44
+43
+12
+78
+49
+13
+1
+49
+21
+1
+49
+9
+1
+11
+I
+b
+I
+3
+I
+2
+I
+2
+n
+p
+24
+x
+8
+@options
+x
+11
+redirect_to
+x
+2
+[]
+x
+3
+URI
+n
+x
+5
+split
+x
+4
+Rack
+n
+x
+7
+Request
+x
+3
+new
+x
+8
+allocate
+x
+3
+env
+x
+4
+Hash
+x
+16
+new_from_literal
+s
+15
+rack.url_scheme
+x
+3
+[]=
+s
+22
+HTTP_X_FORWARDED_PROTO
+s
+21
+HTTP_X_FORWARDED_PORT
+x
+8
+port_for
+x
+4
+to_s
+s
+11
+SERVER_PORT
+x
+5
+merge
+s
+9
+HTTP_HOST
+x
+10
+initialize
+p
+45
+I
+-1
+I
+7d
+I
+0
+I
+7e
+I
+9
+I
+7f
+I
+19
+I
+80
+I
+2e
+I
+82
+I
+32
+I
+84
+I
+47
+I
+88
+I
+50
+I
+85
+I
+5a
+I
+86
+I
+64
+I
+87
+I
+76
+I
+88
+I
+87
+I
+84
+I
+8a
+I
+89
+I
+a8
+I
+84
+I
+b7
+I
+88
+I
+c0
+I
+85
+I
+ca
+I
+86
+I
+d4
+I
+87
+I
+e6
+I
+88
+I
+f7
+I
+84
+I
+fa
+I
+89
+I
+118
+I
+84
+I
+11f
+x
+85
+/Users/remy/Development/Ruby/Gems/tobmatth/rack-ssl-enforcer/lib/rack/ssl-enforcer.rb
+p
+3
+x
+3
+req
+x
+6
+scheme
+x
+3
+uri
+x
+8
+port_for
+M
+1
+n
+n
+x
+8
+port_for
+i
+16
+20
+0
+7
+0
+64
+83
+1
+9
+13
+7
+2
+8
+15
+4
+80
+11
+I
+3
+I
+1
+I
+1
+I
+1
+n
+p
+3
+s
+5
+https
+x
+2
+==
+I
+1bb
+p
+5
+I
+-1
+I
+8c
+I
+0
+I
+8d
+I
+10
+x
+85
+/Users/remy/Development/Ruby/Gems/tobmatth/rack-ssl-enforcer/lib/rack/ssl-enforcer.rb
+p
+1
+x
+6
+scheme
+x
+23
+flag_cookies_as_secure!
+M
+1
+n
+n
+x
+23
+flag_cookies_as_secure!
+i
+51
+20
+0
+7
+0
+64
+49
+1
+1
+9
+49
+20
+0
+7
+0
+64
+20
+0
+7
+0
+64
+49
+1
+1
+7
+2
+64
+49
+3
+1
+56
+4
+50
+5
+0
+7
+2
+64
+49
+6
+1
+13
+18
+3
+49
+7
+2
+15
+8
+50
+1
+11
+I
+5
+I
+1
+I
+1
+I
+1
+n
+p
+8
+s
+10
+Set-Cookie
+x
+2
+[]
+s
+1
+
+
+x
+5
+split
+M
+1
+p
+2
+x
+9
+for_block
+t
+n
+x
+23
+flag_cookies_as_secure!
+i
+49
+57
+19
+0
+15
+20
+0
+7
+0
+13
+70
+9
+24
+15
+44
+43
+1
+7
+2
+78
+49
+3
+2
+6
+0
+49
+4
+1
+10
+32
+2
+8
+33
+3
+9
+46
+20
+0
+47
+101
+5
+7
+6
+63
+2
+8
+48
+20
+0
+11
+I
+6
+I
+1
+I
+1
+I
+1
+n
+p
+7
+n
+x
+6
+Regexp
+s
+8
+ secure;
+x
+3
+new
+x
+2
+=~
+x
+4
+to_s
+s
+8
+; secure
+p
+5
+I
+0
+I
+93
+I
+4
+I
+94
+I
+31
+x
+85
+/Users/remy/Development/Ruby/Gems/tobmatth/rack-ssl-enforcer/lib/rack/ssl-enforcer.rb
+p
+1
+x
+6
+cookie
+x
+3
+map
+x
+4
+join
+x
+3
+[]=
+p
+13
+I
+-1
+I
+91
+I
+0
+I
+92
+I
+a
+I
+93
+I
+22
+I
+95
+I
+25
+I
+93
+I
+31
+I
+92
+I
+33
+x
+85
+/Users/remy/Development/Ruby/Gems/tobmatth/rack-ssl-enforcer/lib/rack/ssl-enforcer.rb
+p
+1
+x
+7
+headers
+x
+17
+set_hsts_headers!
+M
+1
+n
+n
+x
+17
+set_hsts_headers!
+i
+102
+44
+43
+0
+80
+49
+1
+1
+13
+7
+2
+7
+3
+49
+4
+2
+15
+13
+7
+5
+2
+49
+4
+2
+15
+19
+1
+15
+20
+1
+39
+6
+7
+7
+49
+8
+1
+49
+9
+1
+15
+7
+10
+20
+1
+7
+2
+49
+8
+1
+47
+101
+11
+63
+2
+19
+2
+15
+20
+1
+7
+5
+49
+8
+1
+9
+77
+20
+2
+7
+12
+64
+81
+13
+19
+2
+8
+78
+1
+15
+20
+0
+44
+43
+0
+79
+49
+1
+1
+13
+7
+14
+64
+20
+2
+49
+4
+2
+15
+49
+9
+1
+11
+I
+8
+I
+3
+I
+1
+I
+1
+n
+p
+15
+x
+4
+Hash
+x
+16
+new_from_literal
+x
+7
+expires
+I
+1e13380
+x
+3
+[]=
+x
+10
+subdomains
+x
+8
+@options
+x
+4
+hsts
+x
+2
+[]
+x
+6
+merge!
+s
+8
+max-age=
+x
+4
+to_s
+s
+19
+; includeSubDomains
+x
+1
++
+s
+25
+Strict-Transport-Security
+p
+13
+I
+-1
+I
+9a
+I
+0
+I
+9b
+I
+1b
+I
+9c
+I
+28
+I
+9d
+I
+39
+I
+9e
+I
+4f
+I
+9f
+I
+66
+x
+85
+/Users/remy/Development/Ruby/Gems/tobmatth/rack-ssl-enforcer/lib/rack/ssl-enforcer.rb
+p
+3
+x
+7
+headers
+x
+4
+opts
+x
+5
+value
+p
+27
+I
+2
+I
+4
+I
+10
+I
+14
+I
+1e
+I
+2b
+I
+22
+I
+2d
+I
+30
+I
+31
+I
+3e
+I
+36
+I
+4c
+I
+40
+I
+5a
+I
+5a
+I
+68
+I
+69
+I
+76
+I
+7d
+I
+84
+I
+8c
+I
+92
+I
+91
+I
+a0
+I
+9a
+I
+ae
+x
+85
+/Users/remy/Development/Ruby/Gems/tobmatth/rack-ssl-enforcer/lib/rack/ssl-enforcer.rb
+p
+0
+x
+13
+attach_method
+p
+3
+I
+2
+I
+2
+I
+1d
+x
+85
+/Users/remy/Development/Ruby/Gems/tobmatth/rack-ssl-enforcer/lib/rack/ssl-enforcer.rb
+p
+0
+x
+13
+attach_method
+p
+3
+I
+0
+I
+1
+I
+1c
+x
+85
+/Users/remy/Development/Ruby/Gems/tobmatth/rack-ssl-enforcer/lib/rack/ssl-enforcer.rb
+p
+0