# File lib/rack/ssl.rb, line 23 def call(env) if @exclude && @exclude.call(env) @app.call(env) elsif scheme(env) == 'https' status, headers, body = @app.call(env) headers = hsts_headers.merge(headers) flag_cookies_as_secure!(headers) [status, headers, body] else redirect_to_https(env) end end