mirror of
https://github.com/discourse/discourse.git
synced 2024-11-25 09:42:07 +08:00
bca855f239
- Run the CSP-nonce-related middlewares on the generated response - Fix the readonly mode checking to avoid empty strings being passed (the `check_readonly_mode` before_action will not execute in the case of these re-dispatched exceptions) - Move the BlockRequestsMiddleware cookie-setting to the middleware, so that it is included even for unusual HTML responses like these exceptions |
||
|---|---|---|
| .. | ||
| anonymous_cache.rb | ||
| csp_script_nonce_injector.rb | ||
| discourse_public_exceptions.rb | ||
| enforce_hostname.rb | ||
| missing_avatars.rb | ||
| omniauth_bypass_middleware.rb | ||
| request_tracker.rb | ||
| turbo_dev.rb | ||