Drop dependency on secure_headers, fix response headers (#15712)

* Drop dependency on secure_headers, use always_write_cookie instead

* Fix cookies in Tor Hidden Services by moving configuration to application.rb

* Instead of setting always_write_cookie at boot, monkey-patch ActionDispatch
This commit is contained in:
Claire
2021-02-11 23:47:05 +01:00
committed by GitHub
parent eb23f98592
commit 21fb3f3684
8 changed files with 24 additions and 16 deletions

View File

@ -161,5 +161,3 @@ gem 'connection_pool', require: false
gem 'xorcist', '~> 1.1'
gem 'pluck_each', '~> 0.1.3'
gem 'secure_headers', '~> 3.5'