Adding option to allow redirects from https to http
Nobody has claimed this yet.
- Dominant language
- Ruby
- Stars
- 61
- Forks
- 22
- Avg merge
- 15m
- Merged PRs (30d)
- 2
Description
Putting up a feature request to allow passing in an option or something to permit redirects from https links to http. I realize there are some security considerations here, but sites redirecting their https links to http has been extremely common, and for simply fetching data from a page with no cookies, the risk seems minimal. And no less safe than if you had provided the http link first.
Currently it would seem the only option is to monkey patch open-uri.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by locating redirect handling and the public option interface in this open-uri repository; the issue names no specific file or test. Review how HTTPS-to-HTTP redirects are handled and the security implications of an opt-in behavior. Done means the option's shape, safety behavior, and regression coverage are clearly established.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- ruby
- Domain
- networking
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 30/100