search

sogeti / DroidNetworking

A networking library for Android.
21 stars 12 forks source link

HTTP to HTTPS redirections, always to GET #7

Open rafacouto opened 10 years ago

rafacouto commented 10 years ago

I have detected that POST requests redirected from HTTP to HTTPS are converted to GET requests.

Redirections are ordered by Apache webserver with Redirect directive It produces responses with HTTP status 301 (Moved Permanently):

<VirtualHost myhost.com:80>
    # Force HTTPS:
    Redirect permanent / https://myhost.com/
</VirtualHost>

May be that changing the method is a security feature, or may be a bug. In any case, I have dig into DroidNetworking code and it seems a behavior from the org.apache.http namespace (I am not completly sure).

netdev commented 10 years ago

I will look in to this in a few days!