Jeremy Daer 26b3d2abb0 Leave the scheme off this origin's script sources ...

Behind a proxy that terminates TLS without X-Forwarded-Proto, Rails sees
http while the page is https, and an http source on a non-default port
doesn't match. A source without a scheme takes the page's own.

(cherry picked from commit 0a494a10cb)

2026-10-17 00:47:41 -07:00

..

accounts

Apply the same user filter to every page of account members

2026-10-05 15:19:21 +02:00

autocompletable

Polish

2026-09-26 09:13:27 +02:00

concerns

Leave the scheme off this origin's script sources

2026-10-17 00:47:41 -07:00

messages

Merge commit from fork

2026-10-07 01:41:12 -07:00

rooms

Preload only uncached messages and reduce rendering overhead (#292)

2026-10-04 12:36:36 -04:00

sessions

Hello world

2025-08-21 09:31:59 +01:00

users

Compose sidebar lists from existing room scopes

2026-10-05 12:48:29 +00:00

accounts_controller.rb

Apply the same user filter to every page of account members

2026-10-05 15:19:21 +02:00

application_controller.rb

Enforce a script policy that allows the importmap by hash

2026-10-17 00:47:32 -07:00

first_runs_controller.rb

Address race condition during "first run" account creation

2025-12-12 10:51:28 -05:00

messages_controller.rb

Preload only uncached messages and reduce rendering overhead (#292)

2026-10-04 12:36:36 -04:00

pwa_controller.rb

Hello world

2025-08-21 09:31:59 +01:00

qr_code_controller.rb

Hello world

2025-08-21 09:31:59 +01:00

rooms_controller.rb

Delete a room's messages in a job, one transaction each

2026-10-06 13:57:05 +02:00

searches_controller.rb

Bound accessible search probes and reject invalid benchmark responses

2026-10-07 14:22:07 +02:00

sessions_controller.rb

Delete server-side session on logout

2026-01-16 09:31:22 +01:00

unfurl_links_controller.rb

Put the whole unfurl, lookups included, under one deadline

2026-10-06 14:03:26 +02:00

users_controller.rb

Hello world

2025-08-21 09:31:59 +01:00

welcome_controller.rb

Hello world

2025-08-21 09:31:59 +01:00