4 Commits

Author	SHA1	Message	Date
David Taylor	b60b57cddd	FIX: Allow any protocol in wildcard url checker (#8651) ... This is required for people using apps with custom protocols. We still verify the entire URL (including protocol) against the site setting value. Refactored wildcard_url_checker so that it always returns a boolean, rather than sometimes returning a regex match.	2020-01-02 16:03:13 +00:00
Krzysztof Kotlarek	d8360b4c82	SECURITY: vulnerability in WildcardUrlChecker	2019-12-13 09:29:09 -05:00
Sam Saffron	30990006a9	DEV: enable frozen string literal on all files ... This reduces chances of errors where consumers of strings mutate inputs and reduces memory usage of the app. Test suite passes now, but there may be some stuff left, so we will run a few sites on a branch prior to merging	2019-05-13 09:31:32 +08:00
Davide Porrovecchio	75aaae5d5c	FEATURE: Allow wildcard in allowed_user_api_auth_redirects setting (#6779)	2019-02-26 17:03:20 +01:00