Jeremy Daer 2ba940c683 Allow an asset host only up to its own asset directory ...

An asset host's path can contain the asset directory too, as in
https://cdn.example.com/assets, and cutting each URL at the first one would
allow everything the host serves under it. Cut at the last one instead.

2026-10-15 19:13:26 -07:00

..

content_security_policy_test.rb

Allow an asset host only up to its own asset directory

2026-10-15 19:13:26 -07:00