Skip to content

Commit c369dde

Browse files
ervinismuervinismu
authored
fix: use https instead of http in links (#312)
Fix issue #306
1 parent 706e932 commit c369dde

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

55 files changed

+282
-282
lines changed

‎README.md

+4-4
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@ Sinatra Website / Documentation
22
===============================
33

44
This repo contains the Sinatra website and documentation sources published
5-
at [http://sinatra.github.com/](http://sinatra.github.io/).
5+
at [https://sinatra.github.com/](https://sinatra.github.io/).
66

77
Working Locally
88
---------------
@@ -27,9 +27,9 @@ Run the test server:
2727
Changes are immediately available at:
2828

2929
http://localhost:4000/sinatra.github.com/
30-
3130

32-
31+
32+
3333
Sass / CSS / Gulp
3434
--------------
3535

@@ -73,7 +73,7 @@ and the API docs:
7373
$ gem install thor
7474
$ gem install rdoc -v 2.3.0
7575
$ gem install haml -v 2.0.4
76-
$ gem install mislav-hanna --source=http://gems.github.com/
76+
$ gem install mislav-hanna --source=https://gems.github.com/
7777

7878
The prebuilt file sources are maintained under the [sinatra](https://github.com/sinatra/sinatra) and
7979
[sinatra-book](https://github.com/sinatra/sinatra-book) projects. To pull in the latest versions and build them:

‎Thorfile

+1-1
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@ class Blog < Thor
77
layout: post
88
title: TITLE
99
author: YOUR NAME
10-
author_url: http://sinatra.github.com/
10+
author_url: https://sinatra.github.com/
1111
publish_date: #{Time.now.strftime('%A, %B %d, %Y')}
1212
---
1313

‎_includes/README.html

+11-11
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" "http://www.w3.org/TR/REC-html40/loose.dtd">
1+
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" "https://www.w3.org/TR/REC-html40/loose.dtd">
22
<html><body>
33

44
<p><a href="https://badge.fury.io/rb/sinatra"><img src="https://badge.fury.io/rb/sinatra.svg" alt="Gem Version"></a>
@@ -323,7 +323,7 @@ <h2 id="static-files">Static Files</h2>
323323

324324
<p>Note that the public directory name is not included in the URL. A file
325325
<code>./public/css/style.css</code> is made available as
326-
<code>http://example.com/css/style.css</code>.</p>
326+
<code>https://example.com/css/style.css</code>.</p>
327327

328328
<p>Use the <code>:static_cache_control</code> setting (see <a href="#cache-control">below</a>) to add
329329
<code>Cache-Control</code> header info.</p>
@@ -474,7 +474,7 @@ <h4 id="haml-templates">Haml Templates</h4>
474474
<table>
475475
<tr>
476476
<td>Dependency</td>
477-
<td><a href="http://haml.info/" title="haml">haml</a></td>
477+
<td><a href="https://haml.info/" title="haml">haml</a></td>
478478
</tr>
479479
<tr>
480480
<td>File Extension</td>
@@ -533,7 +533,7 @@ <h4 id="nokogiri-templates">Nokogiri Templates</h4>
533533
<table>
534534
<tr>
535535
<td>Dependency</td>
536-
<td><a href="http://www.nokogiri.org/" title="nokogiri">nokogiri</a></td>
536+
<td><a href="https://www.nokogiri.org/" title="nokogiri">nokogiri</a></td>
537537
</tr>
538538
<tr>
539539
<td>File Extension</td>
@@ -616,7 +616,7 @@ <h4 id="rdoc-templates">RDoc Templates</h4>
616616
<table>
617617
<tr>
618618
<td>Dependency</td>
619-
<td><a href="http://rdoc.sourceforge.net/" title="RDoc">RDoc</a></td>
619+
<td><a href="https://rdoc.sourceforge.net/" title="RDoc">RDoc</a></td>
620620
</tr>
621621
<tr>
622622
<td>File Extension</td>
@@ -649,7 +649,7 @@ <h4 id="asciidoc-templates">AsciiDoc Templates</h4>
649649
<table>
650650
<tr>
651651
<td>Dependency</td>
652-
<td><a href="http://asciidoctor.org/" title="Asciidoctor">Asciidoctor</a></td>
652+
<td><a href="https://asciidoctor.org/" title="Asciidoctor">Asciidoctor</a></td>
653653
</tr>
654654
<tr>
655655
<td>File Extension</td>
@@ -1382,7 +1382,7 @@ <h3 id="browser-redirect">Browser Redirect</h3>
13821382
<p>Any additional parameters are handled like arguments passed to <code>halt</code>:</p>
13831383

13841384
<div class="language-ruby highlighter-rouge"><div class="highlight"><pre class="highlight"><code><span class="n">redirect</span> <span class="n">to</span><span class="p">(</span><span class="s1">'/bar'</span><span class="p">),</span> <span class="mi">303</span>
1385-
<span class="n">redirect</span> <span class="s1">'http://www.google.com/'</span><span class="p">,</span> <span class="s1">'wrong place, buddy'</span>
1385+
<span class="n">redirect</span> <span class="s1">'https://www.google.com/'</span><span class="p">,</span> <span class="s1">'wrong place, buddy'</span>
13861386
</code></pre></div></div>
13871387

13881388
<p>You can also easily redirect back to the page the user came from with
@@ -1554,7 +1554,7 @@ <h3 id="accessing-the-request-object">Accessing the Request Object</h3>
15541554
<p>The incoming request object can be accessed from request level (filter,
15551555
routes, error handlers) through the <code>request</code> method:</p>
15561556

1557-
<div class="language-ruby highlighter-rouge"><div class="highlight"><pre class="highlight"><code><span class="c1"># app running on http://example.com/example</span>
1557+
<div class="language-ruby highlighter-rouge"><div class="highlight"><pre class="highlight"><code><span class="c1"># app running on https://example.com/example</span>
15581558
<span class="n">get</span> <span class="s1">'/foo'</span> <span class="k">do</span>
15591559
<span class="n">t</span> <span class="o">=</span> <span class="sx">%w[text/css text/html application/javascript]</span>
15601560
<span class="n">request</span><span class="p">.</span><span class="nf">accept</span> <span class="c1"># ['text/html', '*/*']</span>
@@ -1577,7 +1577,7 @@ <h3 id="accessing-the-request-object">Accessing the Request Object</h3>
15771577
<span class="n">request</span><span class="p">.</span><span class="nf">user_agent</span> <span class="c1"># user agent (used by :agent condition)</span>
15781578
<span class="n">request</span><span class="p">.</span><span class="nf">cookies</span> <span class="c1"># hash of browser cookies</span>
15791579
<span class="n">request</span><span class="p">.</span><span class="nf">xhr?</span> <span class="c1"># is this an ajax request?</span>
1580-
<span class="n">request</span><span class="p">.</span><span class="nf">url</span> <span class="c1"># "http://example.com/example/foo"</span>
1580+
<span class="n">request</span><span class="p">.</span><span class="nf">url</span> <span class="c1"># "https://example.com/example/foo"</span>
15811581
<span class="n">request</span><span class="p">.</span><span class="nf">path</span> <span class="c1"># "/example/foo"</span>
15821582
<span class="n">request</span><span class="p">.</span><span class="nf">ip</span> <span class="c1"># client IP address</span>
15831583
<span class="n">request</span><span class="p">.</span><span class="nf">secure?</span> <span class="c1"># false (would be true over ssl)</span>
@@ -2216,7 +2216,7 @@ <h2 id="sinatrabase---middleware-libraries-and-modular-apps">Sinatra::Base - Mid
22162216
</ul>
22172217

22182218
<p><code>Sinatra::Base</code> is a blank slate. Most options are disabled by default,
2219-
including the built-in server. See <a href="http://www.sinatrarb.com/configuration.html">Configuring
2219+
including the built-in server. See <a href="https://www.sinatrarb.com/configuration.html">Configuring
22202220
Settings</a> for details on
22212221
available options and their behavior. If you want behavior more similar
22222222
to when you define your app at the top level (also known as Classic
@@ -2701,7 +2701,7 @@ <h2 id="further-reading">Further Reading</h2>
27012701
<li>
27022702
<a href="https://github.com/sinatra/sinatra-book">Sinatra Book</a> - Cookbook Tutorial</li>
27032703
<li>
2704-
<a href="http://recipes.sinatrarb.com/">Sinatra Recipes</a> - Community contributed
2704+
<a href="https://recipes.sinatrarb.com/">Sinatra Recipes</a> - Community contributed
27052705
recipes</li>
27062706
<li>API documentation for the <a href="https://www.rubydoc.info/gems/sinatra">latest release</a>
27072707
or the <a href="https://www.rubydoc.info/github/sinatra/sinatra">current HEAD</a> on

‎_includes/navbar.html

+4-4
Original file line numberDiff line numberDiff line change
@@ -1,14 +1,14 @@
11
<div id='head'>
22

33
<ul id='navbar'>
4-
<li class='nav-list-item'><a href='http://github.com/sinatra/sinatra'>CODE</a></li>
4+
<li class='nav-list-item'><a href='https://github.com/sinatra/sinatra'>CODE</a></li>
55
<li class='nav-list-item'><a href='{{ site.baseurl }}/documentation.html'>DOCS</a></li>
66
<li class='nav-list-item'><a href='{{ site.baseurl }}/intro.html'>README</a></li>
77
<li class='nav-list-item'><a href='{{ site.baseurl }}/blog.html'>BLOG</a></li>
88
<li class='nav-list-item' id='nav-logo'>
99
<a href='{{ site.baseurl }}/'><img src="{{ site.baseurl }}/images/logo.png" height='59' width='86' alt="Sinatra Logo"></a>
1010
</li>
11-
<li class='nav-list-item'><a href='http://github.com/sinatra/sinatra/contributors'>CREW</a></li>
11+
<li class='nav-list-item'><a href='https://github.com/sinatra/sinatra/contributors'>CREW</a></li>
1212
<li class='nav-list-item'><a href='{{ site.baseurl }}/contributing.html'>CONTRIBUTE</a></li>
1313
<li class='nav-list-item'><a href='{{ site.baseurl }}/about.html'>ABOUT</a></li>
1414
<li class='nav-list-item'><a href='https://discord.gg/ncjsfsNHh7'>DISCORD</a></li>
@@ -20,11 +20,11 @@
2020
<div id='hidden-navbar-wrapper'>
2121
<ul class='hide' id='hidden-navbar'>
2222
<li class='hidden-nav-list-item'><a href='{{ site.baseurl }}/'>HOME</a></li>
23-
<li class='hidden-nav-list-item'><a href='http://github.com/sinatra/sinatra'>CODE</a></li>
23+
<li class='hidden-nav-list-item'><a href='https://github.com/sinatra/sinatra'>CODE</a></li>
2424
<li class='hidden-nav-list-item'><a href='{{ site.baseurl }}/documentation.html'>DOCS</a></li>
2525
<li class='hidden-nav-list-item'><a href='{{ site.baseurl }}/intro.html'>README</a></li>
2626
<li class='hidden-nav-list-item'><a href='{{ site.baseurl }}/blog.html'>BLOG</a></li>
27-
<li class='hidden-nav-list-item'><a href='http://github.com/sinatra/sinatra/contributors'>CREW</a></li>
27+
<li class='hidden-nav-list-item'><a href='https://github.com/sinatra/sinatra/contributors'>CREW</a></li>
2828
<li class='hidden-nav-list-item'><a href='{{ site.baseurl }}/about.html'>ABOUT</a></li>
2929
<li class='hidden-nav-list-item'><a href='{{ site.baseurl }}/contributing.html'>CONTRIBUTE</a></li>
3030
<li class='hidden-nav-list-item'><a href='https://discord.gg/ncjsfsNHh7'>DISCORD</a></li>

‎_includes/rack-protection-authenticity-token.html

+1-1
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@
66
<p>all</p>
77
</dd><dt>More infos
88
<dd>
9-
<p><a href="http://en.wikipedia.org/wiki/Cross-site_request_forgery">en.wikipedia.org/wiki/Cross-site_request_forgery</a></p>
9+
<p><a href="https://en.wikipedia.org/wiki/Cross-site_request_forgery">en.wikipedia.org/wiki/Cross-site_request_forgery</a></p>
1010
</dd></dl>
1111

1212
<p>This middleware only accepts requests other than <code>GET</code>, <code>HEAD</code>, <code>OPTIONS</code>, <code>TRACE</code> if their given access token matches the token included in the session.</p>

‎_includes/rack-protection-content-security-policy.html

+1-1
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@
99
<p>Content Security Policy, a mechanism web applications can use to mitigate a broad class of content injection vulnerabilities, such as cross-site scripting (XSS). Content Security Policy is a declarative policy that lets the authors (or server administrators) of a web application inform the client about the sources from which the application expects to load resources.</p>
1010
</dd><dt>More info
1111
<dd>
12-
<p>W3C CSP Level 1 : <a href="https://www.w3.org/TR/CSP1">www.w3.org/TR/CSP1</a>/ (deprecated) W3C CSP Level 2 : <a href="https://www.w3.org/TR/CSP2">www.w3.org/TR/CSP2</a>/ (current) W3C CSP Level 3 : <a href="https://www.w3.org/TR/CSP3">www.w3.org/TR/CSP3</a>/ (draft) <a href="https://developer.mozilla.org/en-US/docs/Web/Security/CSP">developer.mozilla.org/en-US/docs/Web/Security/CSP</a> <a href="http://caniuse.com/#search=ContentSecurityPolicy">caniuse.com/#search=ContentSecurityPolicy</a> <a href="http://content-security-policy.com">content-security-policy.com</a>/ <a href="https://securityheaders.io">securityheaders.io</a> <a href="https://scotthelme.co.uk/csp-cheat-sheet">scotthelme.co.uk/csp-cheat-sheet</a>/ <a href="http://www.html5rocks.com/en/tutorials/security/content-security-policy">www.html5rocks.com/en/tutorials/security/content-security-policy</a>/</p>
12+
<p>W3C CSP Level 1 : <a href="https://www.w3.org/TR/CSP1">www.w3.org/TR/CSP1</a>/ (deprecated) W3C CSP Level 2 : <a href="https://www.w3.org/TR/CSP2">www.w3.org/TR/CSP2</a>/ (current) W3C CSP Level 3 : <a href="https://www.w3.org/TR/CSP3">www.w3.org/TR/CSP3</a>/ (draft) <a href="https://developer.mozilla.org/en-US/docs/Web/Security/CSP">developer.mozilla.org/en-US/docs/Web/Security/CSP</a> <a href="https://caniuse.com/#search=ContentSecurityPolicy">caniuse.com/#search=ContentSecurityPolicy</a> <a href="https://content-security-policy.com">content-security-policy.com</a>/ <a href="https://securityheaders.io">securityheaders.io</a> <a href="https://scotthelme.co.uk/csp-cheat-sheet">scotthelme.co.uk/csp-cheat-sheet</a>/ <a href="https://www.html5rocks.com/en/tutorials/security/content-security-policy">www.html5rocks.com/en/tutorials/security/content-security-policy</a>/</p>
1313
</dd></dl>
1414

1515
<p>Sets the ‘<a href="-Report-Only">Content-Security-Policy</a>’ header.</p>

‎_includes/rack-protection-escaped-params.html

+1-1
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@
66
<p>all</p>
77
</dd><dt>More infos
88
<dd>
9-
<p><a href="http://en.wikipedia.org/wiki/Cross-site_scripting">en.wikipedia.org/wiki/Cross-site_scripting</a></p>
9+
<p><a href="https://en.wikipedia.org/wiki/Cross-site_scripting">en.wikipedia.org/wiki/Cross-site_scripting</a></p>
1010
</dd></dl>
1111

1212
<p>Automatically escapes Rack::Request#params so they can be embedded in HTML or JavaScript without any further issues.</p>

‎_includes/rack-protection-form-token.html

+1-1
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@
66
<p>all</p>
77
</dd><dt>More infos
88
<dd>
9-
<p><a href="http://en.wikipedia.org/wiki/Cross-site_request_forgery">en.wikipedia.org/wiki/Cross-site_request_forgery</a></p>
9+
<p><a href="https://en.wikipedia.org/wiki/Cross-site_request_forgery">en.wikipedia.org/wiki/Cross-site_request_forgery</a></p>
1010
</dd></dl>
1111

1212
<p>Only accepts submitted forms if a given access token matches the token included in the session. Does not expect such a token from Ajax request.</p>

‎_includes/rack-protection-http-origin.html

+2-2
Original file line numberDiff line numberDiff line change
@@ -6,14 +6,14 @@
66
<p>Google Chrome 2, Safari 4 and later</p>
77
</dd><dt>More infos
88
<dd>
9-
<p><a href="http://en.wikipedia.org/wiki/Cross-site_request_forgery">en.wikipedia.org/wiki/Cross-site_request_forgery</a> <a href="http://tools.ietf.org/html/draft-abarth-origin">tools.ietf.org/html/draft-abarth-origin</a></p>
9+
<p><a href="https://en.wikipedia.org/wiki/Cross-site_request_forgery">en.wikipedia.org/wiki/Cross-site_request_forgery</a> <a href="https://tools.ietf.org/html/draft-abarth-origin">tools.ietf.org/html/draft-abarth-origin</a></p>
1010
</dd></dl>
1111

1212
<p>Does not accept unsafe HTTP requests when value of Origin HTTP request header does not match default or permitted URIs.</p>
1313

1414
<p>If you want to permit a specific domain, you can pass in as the ‘:permitted_origins` option:</p>
1515

16-
<pre class="ruby"><span class="ruby-identifier">use</span> <span class="ruby-constant">Rack</span><span class="ruby-operator">::</span><span class="ruby-constant">Protection</span>, <span class="ruby-value">permitted_origins:</span> [<span class="ruby-string">&quot;http://localhost:3000&quot;</span>, <span class="ruby-string">&quot;http://127.0.01:3000&quot;</span>]
16+
<pre class="ruby"><span class="ruby-identifier">use</span> <span class="ruby-constant">Rack</span><span class="ruby-operator">::</span><span class="ruby-constant">Protection</span>, <span class="ruby-value">permitted_origins:</span> [<span class="ruby-string">&quot;http://localhost:3000&quot;</span>, <span class="ruby-string">&quot;https://127.0.01:3000&quot;</span>]
1717
</pre>
1818

1919
<p>The ‘:allow_if` option can also be set to a proc to use custom allow/deny logic.</p>

‎_includes/rack-protection-ip-spoofing.html

+1-1
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@
66
<p>all</p>
77
</dd><dt>More infos
88
<dd>
9-
<p><a href="http://blog.c22.cc/2011/04/22/surveymonkey-ip-spoofing">blog.c22.cc/2011/04/22/surveymonkey-ip-spoofing</a>/</p>
9+
<p><a href="https://blog.c22.cc/2011/04/22/surveymonkey-ip-spoofing">blog.c22.cc/2011/04/22/surveymonkey-ip-spoofing</a>/</p>
1010
</dd></dl>
1111

1212
<p>Detect (some) IP spoofing attacks.</p>

‎_includes/rack-protection-json-csrf.html

+1-1
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@
66
<p>all</p>
77
</dd><dt>More infos
88
<dd>
9-
<p><a href="http://flask.pocoo.org/docs/0.10/security/#json-security">flask.pocoo.org/docs/0.10/security/#json-security</a> <a href="http://haacked.com/archive/2008/11/20/anatomy-of-a-subtle-json-vulnerability.aspx">haacked.com/archive/2008/11/20/anatomy-of-a-subtle-json-vulnerability.aspx</a></p>
9+
<p><a href="https://flask.pocoo.org/docs/0.10/security/#json-security">flask.pocoo.org/docs/0.10/security/#json-security</a> <a href="https://haacked.com/archive/2008/11/20/anatomy-of-a-subtle-json-vulnerability.aspx">haacked.com/archive/2008/11/20/anatomy-of-a-subtle-json-vulnerability.aspx</a></p>
1010
</dd></dl>
1111

1212
<p>JSON GET APIs are vulnerable to being embedded as JavaScript when the Array prototype has been patched to track data. Checks the referrer even on GET requests if the content type is JSON.</p>

‎_includes/rack-protection-path-traversal.html

+1-1
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@
66
<p>all</p>
77
</dd><dt>More infos
88
<dd>
9-
<p><a href="http://en.wikipedia.org/wiki/Directory_traversal">en.wikipedia.org/wiki/Directory_traversal</a></p>
9+
<p><a href="https://en.wikipedia.org/wiki/Directory_traversal">en.wikipedia.org/wiki/Directory_traversal</a></p>
1010
</dd></dl>
1111

1212
<p>Unescapes ‘/’ and ‘.’, expands <code>path_info</code>. Thus <code>GET /foo/%2e%2e%2fbar</code> becomes <code>GET /bar</code>.</p>

0 commit comments

Comments
 (0)