This repository has been archived on 2023-03-18. You can view files and clone it. You cannot open issues or pull requests or push a commit.
Files
osr-discourse-src/lib
David Taylor 19814c5e81 FIX: Allow CSP to work correctly for non-default hostnames/schemes (#9180)
- Define the CSP based on the requested domain / scheme (respecting force_https)
- Update EnforceHostname middleware to allow secondary domains, add specs
- Add URL scheme to anon cache key so that CSP headers are cached correctly
2020-03-19 19:54:42 +00:00
..
2020-01-15 11:27:12 +01:00
2019-10-21 12:08:20 +01:00
2019-04-29 16:41:35 +08:00
2019-05-22 17:39:44 +03:00
2020-03-05 16:10:28 -05:00
2019-10-21 12:08:20 +01:00