David Taylor 19814c5e81 FIX: Allow CSP to work correctly for non-default hostnames/schemes (#9180) ... - Define the CSP based on the requested domain / scheme (respecting force_https) - Update EnforceHostname middleware to allow secondary domains, add specs - Add URL scheme to anon cache key so that CSP headers are cached correctly		2020-03-19 19:54:42 +00:00
..
anonymous_cache_spec.rb	DEV: s/\$redis/Discourse\.redis (#8431)	2019-12-03 10:05:53 +01:00
discourse_public_exceptions_spec.rb	FIX: do not log if an invalid mime type is passed to app	2019-11-21 15:51:34 +11:00
enforce_hostname_spec.rb	FIX: Allow CSP to work correctly for non-default hostnames/schemes (#9180)	2020-03-19 19:54:42 +00:00
request_tracker_spec.rb	FIX: crawler requests not tracked for non UTF-8 user agents	2019-12-09 17:43:51 +11:00