3 commits

Author	SHA1	Message	Date
Justin Tracey	adb482477e	use host instead of headers to make Rack happy (#15741) ... "headers" is provided by Rails, Rack can't rely on it	2021-02-16 15:28:17 +01:00
Cecylia Bocovich	6f95d30ef9	Monkey patch Rack::Session to send secure cookies to onions (#15725)	2021-02-14 00:10:52 +01:00
Claire	e47570388a	Drop dependency on secure_headers, fix response headers (#15712) ... * Drop dependency on secure_headers, use always_write_cookie instead * Fix cookies in Tor Hidden Services by moving configuration to application.rb * Instead of setting always_write_cookie at boot, monkey-patch ActionDispatch	2021-02-11 23:47:05 +01:00