3 Commits (c35a6b9e01a4f3b4c1dbdb2971187e49ea30096f)

Author	SHA1	Message	Date
Claire	21fb3f3684	Drop dependency on secure_headers, fix response headers (#15712) ... * Drop dependency on secure_headers, use always_write_cookie instead * Fix cookies in Tor Hidden Services by moving configuration to application.rb * Instead of setting always_write_cookie at boot, monkey-patch ActionDispatch	4 years ago
Cecylia Bocovich	e79f8dd85c	Onion service related changes to HTTPS handling (#15560) ... * Enable secure cookie flag for https only * Disable force_ssl for .onion hosts only Co-authored-by: Aiden McClelland <me@drbonez.dev>	4 years ago
Eugen Rochko	acc1c03861	Fix cookies not having a SameSite attribute (#15098)	4 years ago