Enforce HTTPS on Heroku

alphagov / govuk_elements

❗️GOV.UK Elements is deprecated, and will only receive major bug fixes and security patches.

https://govuk-elements.herokuapp.com/

MIT License

227 stars 90 forks source link

Enforce HTTPS on Heroku #633

Closed 36degrees closed 4 years ago

36degrees commented 4 years ago

Redirect requests made over http to https by using express-sslify.

Closes alphagov/design-system-team-internal#286

(Also #582 and #439)

36degrees commented 4 years ago

curl -I http://govuk-elemen-redirect-h-czcve4.herokuapp.com/
HTTP/1.1 301 Moved Permanently
Server: Cowboy
Connection: keep-alive
X-Powered-By: Express
Location: https://govuk-elemen-redirect-h-czcve4.herokuapp.com/
Vary: Accept
Content-Type: text/plain; charset=utf-8
Content-Length: 87
Date: Mon, 27 Apr 2020 12:56:46 GMT
Via: 1.1 vegur