public/once-campfire
1
0 Fork 0
mirror of https://github.com/basecamp/once-campfire.git synced 2026-10-28 00:16:48 +09:00
Code Issues Packages Projects Releases Wiki Activity
Files
9c8f4cd2729745cfba2599ab9b38096c1b416019
once-campfire/test
T
History
Jeremy Daer 9c8f4cd272 Keep the CSP nonce cookie off public cacheable responses 
The nonce generator runs for every response that carries the policy, so
the nonce_id cookie was set on QR codes, logos, avatars and disk-served
blobs — all public, shared-cacheable. Those endpoints now opt out of the
policy, so no cache can replay one client's identifier and nonce.
2026-09-13 17:01:24 -07:00
..
channels
Scope the unread rooms stream per user
2026-08-03 14:55:19 -07:00
controllers
Scope the unread rooms stream per user
2026-08-03 14:55:19 -07:00
fixtures
Disable libvips unfuzzed operations (#226)
2026-07-28 11:57:57 -04:00
helpers
Hello world
2025-08-21 09:31:59 +01:00
integration
Keep the CSP nonce cookie off public cacheable responses
2026-09-13 17:01:24 -07:00
lib
Disable libvips unfuzzed operations (#226)
2026-07-28 11:57:57 -04:00
models
Disable libvips unfuzzed operations (#226)
2026-07-28 11:57:57 -04:00
performance
Hello world
2025-08-21 09:31:59 +01:00
system
Hello world
2025-08-21 09:31:59 +01:00
test_helpers
Hello world
2025-08-21 09:31:59 +01:00
application_system_test_case.rb
Hello world
2025-08-21 09:31:59 +01:00
test_helper.rb
Now required to be explicitly included
2025-12-01 15:23:57 +01:00