David Taylor 19814c5e81

FIX: Allow CSP to work correctly for non-default hostnames/schemes (#9180) ...

- Define the CSP based on the requested domain / scheme (respecting force_https)
- Update EnforceHostname middleware to allow secondary domains, add specs
- Add URL scheme to anon cache key so that CSP headers are cached correctly

2020-03-19 19:54:42 +00:00

..

builder_spec.rb

…