Jeremy Daer 26b3d2abb0 Leave the scheme off this origin's script sources ...

Behind a proxy that terminates TLS without X-Forwarded-Proto, Rails sees
http while the page is https, and an http source on a non-default port
doesn't match. A source without a scheme takes the page's own.

(cherry picked from commit 0a494a10cb)

2026-10-17 00:47:41 -07:00

..

assets

Keep the message body list styles out of the mention menu

2026-09-26 11:16:03 +02:00

channels

Keep same-second unread events and bound idle push connections

2026-10-07 11:00:47 +02:00

controllers

Leave the scheme off this origin's script sources

2026-10-17 00:47:41 -07:00

helpers

Link URLs only in a message's text

2026-10-17 00:46:37 -07:00

javascript

Quote a mention as text when replying

2026-10-17 00:46:37 -07:00

jobs

Merge pull request #329: Delete a room's messages in a job, one transaction each

2026-10-07 10:33:57 +02:00

models

Stop sending push notifications to banned users (#338)

2026-10-07 11:25:16 -07:00

views

Link URLs only in a message's text

2026-10-17 00:46:37 -07:00