Jeremy Daer 2ba940c683 Allow an asset host only up to its own asset directory ...

An asset host's path can contain the asset directory too, as in
https://cdn.example.com/assets, and cutting each URL at the first one would
allow everything the host serves under it. Cut at the last one instead.

2026-10-15 19:13:26 -07:00

..

authentication

Reuse epoch-verified record snapshots and avoid empty push payloads

2026-10-08 12:26:50 +02:00

active_storage_authentication.rb

Require authentication for Active Storage direct uploads (#267)

2026-08-30 10:24:41 -07:00

allow_browser.rb

Hello world

2025-08-21 09:31:59 +01:00

authentication.rb

Use header-only forgery protection and cache complete responses

2026-10-08 09:05:10 +02:00

authorization.rb

Hello world

2025-08-21 09:31:59 +01:00

block_banned_requests.rb

Add IP-based user banning

2025-11-26 14:30:38 +00:00

cached_responses.rb

Keep transaction guards temporary and simplify quick boost forms

2026-10-08 12:40:31 +02:00

inline_script_hashes.rb

Allow an asset host only up to its own asset directory

2026-10-15 19:13:26 -07:00

raw_request_body.rb

Adjust to the in-house style

2026-08-11 13:15:38 +02:00

room_scoped.rb

Reuse epoch-verified record snapshots and avoid empty push payloads

2026-10-08 12:26:50 +02:00

set_current_request.rb

Preserve request ports in message copy links

2026-10-07 16:37:53 +02:00

set_platform.rb

Hello world

2025-08-21 09:31:59 +01:00

tracked_room_visit.rb

Hello world

2025-08-21 09:31:59 +01:00

version_headers.rb

Hello world

2025-08-21 09:31:59 +01:00