-
Notifications
You must be signed in to change notification settings - Fork 25.1k
Description
Before you open an issue
If the issue is with an ASP.NET Core document:
- Do not open a new issue using this form.
😅 Then you should fix the choosen "Doc Issue" issue template to work on mobile?
- Open the issue using the Open a documentation issue link and feedback form at the bottom of the article.
Using the Open a documentation issue link and form to open an issue adds article metadata for tracking, which indicates the article that you're commenting on.
Page with problem: https://learn.microsoft.com/de-de/aspnet/core/security/enforcing-ssl?view=aspnetcore-9.0&tabs=visual-studio%2Clinux-sles
If the issue is:
- A simple typo or similar correction, you can submit a PR. See the Contributor Guide for instructions: https://docs.microsoft.com/contribute/#quick-edits-to-existing-documents
- A general support question, consider asking on a support forum:
- Stack Overflow: https://stackoverflow.com/questions/tagged/asp.net-core
- ASP.NET Core Slack: https://aspnetcore.slack.com/join/shared_invite/zt-1mv5487zb-EOZxJ1iqb0A0ajowEbxByQ#/shared-invite/email
- ASP.NET Gitter: https://gitter.im/aspnet/Home
- A site design concern, create an issue at MicrosoftDocs/Feedback: https://github.com/MicrosoftDocs/Feedback/issues/new/choose
- A problem completing a tutorial, compare your code with the completed sample.
- A duplicate of an open or closed issue, leave a comment on that issue.
Issue description
The documentation article is constantly switching between the advised way to do this and somehow it seems to me, that the content is duplicated? Just on mobile device right now.
I would read the first paragraph as if we should not use app.UseHttpsRedirection() in production then this Htst (sorry if misspelled) encapsulated for production usage, which would make me assume as reader this would be a if-else (not just 2 seperate if blocks just with one negated and one not)?
Then its telling how to set Htst up with is primary good, but then the next section again advises us to use that other method?! Absolutely confused now 🫣
I would like to set this up correctly so I would not get the known cors / antiforgery header issues for a WebAssembly dotnet/runtime using app + use https, and was advised to use this article page😅🤷
Software versions
Check the .NET target framework(s) being used, and include the version number(s).
- .NET Core
- .NET 5.0 or later
- .NET Framework
- .NET Standard
If using the .NET Core SDK, include dotnet --info output. If using .NET Framework without the .NET Core SDK, include info from Visual Studio's Help > About Microsoft Visual Studio dialog.
dotnet --info output or About VS info
<replace>