public class CustomRequireHttps : RequireHttpsAttribute
{
    protected override void HandleNonHttpsRequest(AuthorizationContext filterContext)
    {
        if (filterContext.HttpContext.Request.Url != null && (!String.Equals(filterContext.HttpContext.Request.HttpMethod, "GET", StringComparison.OrdinalIgnoreCase)
                                                              && !String.Equals(filterContext.HttpContext.Request.HttpMethod, "HEAD", StringComparison.OrdinalIgnoreCase)
                                                              && !filterContext.HttpContext.Request.Url.Host.Contains("localhost")
                                                              && !filterContext.HttpContext.Request.Url.Host.Contains("testing")))
        {
            base.HandleNonHttpsRequest(filterContext);
        }
    }
}

#if !DEBUG
[RequireHttps]
#endif

public override void OnAuthorization(AuthorizationContext filterContext)
    {
        if (filterContext == null)
        {
            throw new ArgumentNullException("filterContext");
        }

        if (filterContext.HttpContext != null && filterContext.HttpContext.Request.IsLocal)
        {
            return;
        }

        base.OnAuthorization(filterContext);
    }