ASP.NET

MVC FAQ – RickAndMSFT on Azure & MVC[^]:

The reason we don’t have a [RequireHttp] attribute in MVC is that there’s not really much benefit to it. It’s not as interesting as [RequireHttps], and it encourages users to do the wrong thing. For example, many web sites log in via SSL and redirect back to HTTP after you’re logged in, which is absolutely the wrong thing to do. Your login cookie is just as secret as your username + password, and now you’re sending it in cleartext across the wire. Besides, you’ve already taken the time to perform the handshake and secure the channel (which is the bulk of what makes HTTPS slower than HTTP) before the MVC pipeline is run, so [RequireHttp] won’t make the current request or future requests much faster.

[AttributeUsage(AttributeTargets.Class | AttributeTargets.Method, Inherited = true, AllowMultiple = false)]
public class RequireHttpAttribute : FilterAttribute, IAuthorizationFilter
{
    public virtual void OnAuthorization(AuthorizationContext filterContext)
    {
        if (filterContext == null) throw new ArgumentNullException(nameof(filterContext));

        if (filterContext.HttpContext.Request.IsSecureConnection)
        {
            HandleHttpsRequest(filterContext);
        }
    }

    protected virtual void HandleHttpsRequest(AuthorizationContext filterContext)
    {
        // only redirect for GET requests, otherwise the browser might not propagate the verb and request body correctly.

        if (!String.Equals(filterContext.HttpContext.Request.HttpMethod, "GET", StringComparison.OrdinalIgnoreCase))
        {
            throw new InvalidOperationException();
        }

        // redirect to HTTP version of page
        string url = "http://" + filterContext.HttpContext.Request.Url.Host + filterContext.HttpContext.Request.RawUrl;
        filterContext.Result = new RedirectResult(url);
    }
}

Kevin Marois wrote:

Process.Start(fileData);

public ActionResult Export()
{
    var data = _dal.GetDashboardInfos(new DashboardInfoQueryArgs());
    string content = data.ToList().ToCsv();
    byte[] bytes = Encoding.UTF8.GetBytes(content);
    var result = new FileContentResult(bytes, "text/plain");
    result.FileDownloadName = "ardexport.csv";
    return result;
}

$("#btnSave").click(function () {
    var postData = {
        defaultText = $("#defaultText").val(),
        txtLanId = $("#txtLanId").val(),
        txtLast = $("#txtLast").val(),
        txtFirst = $("#txtFirst").val(),
        txtEmployeeId = $("#txtEmployeeId").val(),
        txtEmail = $("#txtEmail").val(),
        dtFieldHireDate = $("#dtFieldHireDate").val(),
        dtFieldRehireDate = $("#dtFieldRehireDate").val(),
        lbxApplicationGroup = $("#lbxApplicationGroup").val(),
        lbxReportPack = $("#lbxReportPack").val()
    };
    
    // Or, to send the entire form:
    // var postData = $(this.form).serialize();
    
    console.log("POST", postData);
    
    $.ajax({
        type: "POST",
        url: "/api/EmployeeAPI",
        data: postData,
        success: function(data) { console.log("Success", data); },
        error: function() { alert("Error"); }
    });
});