Jeremy Daer 22da6dc19d CSP: full config with env vars per source (#2069) ...

* Configure all sources with CSP_* vars. Space separated source list.
* Fall back to `config.x.content_security_policy.*`
* Move our sources to fizzy-saas

References https://github.com/basecamp/fizzy-saas/pull/24

2025-12-10 17:21:09 -08:00

..

tenanting

This was moved to the gem already by Mike

2025-11-28 15:53:58 +01:00

action_controller_svg_renderer.rb

Extract render svg as a real renderer

2024-10-19 19:31:48 -07:00

action_text.rb

Speedy, auditable, deadlock-resistant storage tracking (#2026)

2025-12-10 16:04:30 -08:00

active_job.rb

Make sure jobs are enqueued only after all transactions are committed

2025-11-20 18:47:42 -05:00

active_storage.rb

Speedy, auditable, deadlock-resistant storage tracking (#2026)

2025-12-10 16:04:30 -08:00

assets.rb

New Rails app

2024-06-21 13:19:56 +01:00

autotuner.rb

Autotuner: use structured logging instead of Sentry (#2011)

2025-12-08 10:01:28 -08:00

content_security_policy.rb

CSP: full config with env vars per source (#2069)

2025-12-10 17:21:09 -08:00

database_role_logging.rb

Disable multi-db for SQLite

2025-11-21 09:15:19 +00:00

error_context.rb

Add lazy error context for Rails error reporter (#2014)

2025-12-08 11:00:40 -08:00

extensions.rb

Support search on markdown fields

2024-11-29 14:28:37 -06:00

filter_parameter_logging.rb

Set up Rubocop

2024-06-21 16:42:48 +01:00

inflections.rb

Rever to using Ssrf instead of SSRF

2025-12-06 11:04:55 +01:00

mission_control.rb

Turn off the help notice

2025-12-01 16:25:23 +01:00

multi_db.rb

Merge branch 'main' into sqlite

2025-11-26 10:07:41 +00:00

permissions_policy.rb

New Rails app

2024-06-21 13:19:56 +01:00

rack_mini_profiler.rb

Make sure rack-mini-profiler doesn't load in test

2025-11-17 15:03:26 -05:00

sanitization.rb

Don't lose existing values in case they had been set

2025-10-07 09:42:25 +02:00

sqlite_schema_dumper.rb

Tidy up modules and on_load points

2025-11-26 10:02:32 +00:00

table_definition_column_limits.rb

Handle size in binary columns

2025-12-01 13:32:54 +01:00

true_client_ip.rb

Copy Cloudflare's True-Client-IP header to X-Forwarded-For

2025-11-03 14:22:33 -05:00

uuid_framework_models.rb

Auto default for UUID primary keys

2025-12-03 14:27:52 +00:00

uuid_primary_keys.rb

Auto default for UUID primary keys

2025-12-03 14:27:52 +00:00

vapid.rb

Remove vapid keys in development

2025-11-28 15:53:58 +01:00

web_push.rb

Security: Web Push SSRF and IP range bypass

2025-12-04 21:35:55 -08:00