angler-fishThe Vulnerability History Project

Fixed #7603 -- Added a 'scheme' property to the HttpRequest object

      `HttpRequest.scheme` is `https` if `settings.SECURE_PROXY_SSL_HEADER` is
appropriately set and falls back to `HttpRequest._get_scheme()` (a hook
for subclasses to implement) otherwise.

`WSGIRequest._get_scheme()` makes use of the `wsgi.url_scheme` WSGI
environ variable to determine the request scheme.

`HttpRequest.is_secure()` simply checks if `HttpRequest.scheme` is
`https`.

This provides a way to check the current scheme in templates, for example.
It also allows us to deal with other schemes.

Thanks nslater for the suggestion.
    
commit c7634cd7fe7dc09338fcec0ca48d816a29d791b0
+1 -1
+1 -1
+1 -1
+2 -2
+2 -2
+11 -8
+1 -1
+2 -2
+7
+6
expand_less