3 Commits (7e91581be0e523f3976bcdc0b3474022f5f4b7be)

Author	SHA1	Message	Date
Claire	e47570388a	Drop dependency on secure_headers, fix response headers (#15712) ... * Drop dependency on secure_headers, use always_write_cookie instead * Fix cookies in Tor Hidden Services by moving configuration to application.rb * Instead of setting always_write_cookie at boot, monkey-patch ActionDispatch	2021-02-11 23:47:05 +01:00
Cecylia Bocovich	6c300f08e5	Onion service related changes to HTTPS handling (#15560) ... * Enable secure cookie flag for https only * Disable force_ssl for .onion hosts only Co-authored-by: Aiden McClelland <me@drbonez.dev>	2021-02-11 04:40:13 +01:00
Eugen Rochko	b788e7eb6f	Fix cookies not having a SameSite attribute (#15098)	2020-11-06 11:57:14 +01:00