19814c5e81
- Define the CSP based on the requested domain / scheme (respecting force_https) - Update EnforceHostname middleware to allow secondary domains, add specs - Add URL scheme to anon cache key so that CSP headers are cached correctly |
||
|---|---|---|
| .. | ||
| category_tag_spec.rb | ||
| content_security_policy_spec.rb | ||
| email_style_spec.rb | ||
| flags_spec.rb | ||
| group_spec.rb | ||
| invite_only_registration_spec.rb | ||
| message_bus_spec.rb | ||
| multisite_spec.rb | ||
| rate_limiting_spec.rb | ||
| same_ip_spammers_spec.rb | ||
| spam_rules_spec.rb | ||
| topic_auto_close_spec.rb | ||
| user_api_keys_spec.rb | ||
| watched_words_spec.rb | ||