Jeremy Daer 7a5931fe2a Allow an asset host only up to its own asset directory ...

An asset host's path can contain the asset directory too, as in
https://cdn.example.com/assets, and cutting each URL at the first one would
allow everything the host serves under it. Cut at the last one instead.

(cherry picked from commit 2ba940c683)

2026-10-17 00:47:41 -07:00

..

content_security_policy_test.rb

Allow an asset host only up to its own asset directory

2026-10-17 00:47:41 -07:00