- Define the CSP based on the requested domain / scheme (respecting force_https) - Update EnforceHostname middleware to allow secondary domains, add specs - Add URL scheme to anon cache key so that CSP headers are cached correctly |
||
|---|---|---|
| .. | ||
| anonymous_cache_spec.rb | ||
| discourse_public_exceptions_spec.rb | ||
| enforce_hostname_spec.rb | ||
| request_tracker_spec.rb | ||