Force HTTPS Across an ASP.NET MVC Application

Nov 19, 2012

Comments

technology

A quick tip if you want to force HTTPS across all of your MVC actions: register the RequireHttpsAttribute in your global filters.

Global.asax: ` csharp public static void RegisterGlobalFilters(GlobalFilterCollection filters) { filters.Add(new RequireHttpsAttribute()); }

If you don't want the redirect to occur in debug mode, you can surround that with an _#if !DEBUG_ block.

Global.asax: ``` csharp
public static void RegisterGlobalFilters(GlobalFilterCollection filters) { #if !DEBUG filters.Add(new RequireHttpsAttribute()); #endif }