ruby on rails 3 - Google Chrome Forces HTTPS -
i developing rails application uses ssl connection. using 3rd party resources js , css files implementing map (openstreetmap) . have tried import these resources (js , css) application, javascript code tries access external wms via http.
the problem google chrome blocking access third-party resources http when application in https.
so disabled ssl on pages of application , tried forcefulness http or https way desire.
following blog: http://www.simonecarletti.com/blog/2011/05/configuring-rails-3-https-ssl/ , works.
but when forcefulness http protocol page these resources used using google chrome, forces https connection causing infinite loop.
if clear chrome cache (that have accessed same page https) in order access via http works. if have accessed https page , seek access via http, chrome forces https connection resulting in infinite loop.
the question is: there can set in request causes chrome take connection?
regards
i've been doing research on this, , turns out turning on force_ssl = true
on rails 3 causes app send hsts header. there's bit of info here: how disable http strict transport security?
essentially, hsts header tells chrome (and firefox) access site through https specific amount of time.
so... reply have can clear own hsts setting going about:net-internals
within chrome browser , removing hsts state.
i think answers here can help you: rails: activating ssl back upwards gets chrome confused
ruby-on-rails-3 http google-chrome https openstreetmap
No comments:
Post a Comment