Use 308 as SSL default redirect status

This way user agents will know that the redirection from HTTP to HTTPS
is permanent and not temporary, which is the case if we activate the
`force_ssl` option (which we do by default).
This commit is contained in:
Javi Martín
2023-07-15 14:54:10 +02:00
parent 05eecaf46c
commit fe94d84e81

View File

@@ -37,7 +37,7 @@ ActiveSupport.utc_to_local_returns_utc_offset_times = true
# Change the default HTTP status code to `308` when redirecting non-GET/HEAD # Change the default HTTP status code to `308` when redirecting non-GET/HEAD
# requests to HTTPS in `ActionDispatch::SSL` middleware. # requests to HTTPS in `ActionDispatch::SSL` middleware.
# Rails.application.config.action_dispatch.ssl_default_redirect_status = 308 Rails.application.config.action_dispatch.ssl_default_redirect_status = 308
# Use new connection handling API. For most applications this won't have any # Use new connection handling API. For most applications this won't have any
# effect. For applications using multiple databases, this new API provides # effect. For applications using multiple databases, this new API provides