4 Commits (d22c4792a0eda16a578d86faa91f097536cdd69b)

Author	SHA1	Message	Date
Justin Tracey	cbcf083cb4	replace all instances of "ends_with?" with "end_with?" (#15745) ... The "ends_with?" method is just a Rails alias of Ruby's "end_with?" method. Using the latter makes the code less brittle.	2021-02-19 09:56:14 +01:00
Justin Tracey	adb482477e	use host instead of headers to make Rack happy (#15741) ... "headers" is provided by Rails, Rack can't rely on it	2021-02-16 15:28:17 +01:00
Cecylia Bocovich	6f95d30ef9	Monkey patch Rack::Session to send secure cookies to onions (#15725)	2021-02-14 00:10:52 +01:00
Claire	e47570388a	Drop dependency on secure_headers, fix response headers (#15712) ... * Drop dependency on secure_headers, use always_write_cookie instead * Fix cookies in Tor Hidden Services by moving configuration to application.rb * Instead of setting always_write_cookie at boot, monkey-patch ActionDispatch	2021-02-11 23:47:05 +01:00