public/once-campfire
1
0 Fork 0
mirror of https://github.com/basecamp/once-campfire.git synced 2026-10-28 00:16:48 +09:00
Code Issues Packages Projects Releases Wiki Activity
Files
9c8f4cd2729745cfba2599ab9b38096c1b416019
once-campfire/app/controllers/accounts
T
History
Jeremy Daer 9c8f4cd272 Keep the CSP nonce cookie off public cacheable responses 
The nonce generator runs for every response that carries the policy, so
the nonce_id cookie was set on QR codes, logos, avatars and disk-served
blobs — all public, shared-cacheable. Those endpoints now opt out of the
policy, so no cache can replay one client's identifier and nonce.
2026-09-13 17:01:24 -07:00
..
bots
Hello world
2025-08-21 09:31:59 +01:00
bots_controller.rb
Hello world
2025-08-21 09:31:59 +01:00
custom_styles_controller.rb
Hello world
2025-08-21 09:31:59 +01:00
join_codes_controller.rb
Hello world
2025-08-21 09:31:59 +01:00
logos_controller.rb
Keep the CSP nonce cookie off public cacheable responses
2026-09-13 17:01:24 -07:00
users_controller.rb
Hello world
2025-08-21 09:31:59 +01:00