ThibG 8203e24cf4 Fix CSP needlessly allowing blob URLs in script-src (#11620)

2019-08-19 20:36:58 +02:00

..

0_post_deployment_migrations.rb

…

1_hosts.rb

…

2_whitelist_mode.rb

Add whitelist mode (#11291)

2019-07-30 11:10:46 +02:00

active_model_serializers.rb

Remove unused ActivityPub @context values depending on response (#10378)

2019-03-27 15:55:23 +01:00

application_controller_renderer.rb

…

assets.rb

…

backtrace_silencers.rb

…

blacklists.rb

…

chewy.rb

…

content_security_policy.rb

Fix CSP needlessly allowing blob URLs in script-src (#11620)

2019-08-19 20:36:58 +02:00

cookies_serializer.rb

…

cors.rb

Use same CORS policy for /@:username and /users/:username (#9485)

2018-12-10 21:39:47 +01:00

delivery_job.rb

Skip mailer job retries when a record no longer exists (#9590)

2018-12-21 06:16:17 +01:00

devise.rb

Disable Same-Site cookie implementation to fix SSO issues on WebKit browsers (#9819)

2019-01-15 23:11:46 +01:00

doorkeeper.rb

Add moderation API (#9387)

2019-06-20 02:52:34 +02:00

fast_blank.rb

…

ffmpeg.rb

…

filter_parameter_logging.rb

…

http_client_proxy.rb

…

httplog.rb

…

inflections.rb

…

json_ld.rb

…

kaminari_config.rb

…

mime_types.rb

…

oj.rb

…

omniauth.rb

cas_options :validate_url should be :service_validate_url (#10328)

2019-03-21 04:06:41 +01:00

open_uri_redirection.rb

…

pagination.rb

…

paperclip.rb

Add timeouts for S3 (#9842)

2019-01-18 01:36:59 +01:00

premailer_rails.rb

…

rack_attack_logging.rb

Bump rack-attack from 5.4.2 to 6.0.0 (#10599)

2019-05-03 16:16:11 +02:00

rack_attack.rb

Fix undefined method error (#10868)

2019-05-28 15:31:51 +03:00

redis.rb

…

session_activations.rb

…

session_store.rb

Disable Same-Site cookie implementation to fix SSO issues on WebKit browsers (#9819)

2019-01-15 23:11:46 +01:00

sidekiq.rb

…

simple_form.rb

Change preferences page into appearance, notifications, and other (#10977)

2019-06-07 03:39:24 +02:00

single_user_mode.rb

…

statsd.rb

Remove unused StatsD code and expose StatsD as a global variable (#11232)

2019-07-02 11:34:39 +02:00

stoplight.rb

Fix stoplight logging to stderr separate from Rails logger (#10624)

2019-04-23 04:39:48 +02:00

strong_migrations.rb

…

suppress_csrf_warnings.rb

…

trusted_proxies.rb

…

twitter_regex.rb

Fix URL linkifier grabbing full-width spaces and quotations (#9997)

2019-02-09 20:13:11 +01:00

vapid.rb

…

wrap_parameters.rb

…