Javi Martín 4fe9d4cbcf Use URL-safe CSRF tokens and SameSite in cookies ...

These measures increase protection against CSRF ataks. The only reason
Rails provides them as a configuration option is there are complex
applications that run one version of the code in some servers while
running an old version of the code in other servers might run into
issues because the the old version won't handle the tokens or cookies
generated by the new version.

Since most Consul applications use just one server and the ones with
more servers would only face this issue for a few seconds (while
upgrading to a new version of Consul Democracy), we can safely enable
these configuration options.

2023-09-11 23:40:37 +02:00

..

acts_as_taggable_on.rb

Add new GraphQL types, schema (with fields) & base mutation

2022-06-01 11:41:09 +02:00

age.rb

Use double quotes in config/initializers

2019-03-15 10:29:03 +01:00

ahoy.rb

Bump ahoy_matey from 1.6.0 to 3.2.0

2021-08-15 01:26:29 +02:00

apartment.rb

Apply Layout/LineLength rubocop rule

2023-08-30 14:46:35 +02:00

application_controller_renderer.rb

Upgrade to Rails 5.2

2020-10-15 14:46:20 +02:00

audited.rb

Use a different controller for investment audits

2019-11-05 13:03:45 +01:00

backtrace_silencers.rb

Upgrade to Rails 6.1

2023-09-11 23:40:37 +02:00

ckeditor.rb

Bump rubocop from 0.75.0 to 0.83.0

2020-06-16 13:47:38 +02:00

content_security_policy.rb

Upgrade to Rails 6.0

2022-08-24 14:33:02 +02:00

cookies_serializer.rb

updates config files

2019-04-16 17:28:06 +02:00

delayed_job_config.rb

Consider the current tenant with delayed jobs

2022-11-09 18:19:20 +01:00

devise-security.rb

Apply Layout/LineLength rubocop rule

2023-08-30 14:46:35 +02:00

devise.rb

Allow different omniauth settings per tenant

2022-11-11 01:39:30 +01:00

disable_active_storage_uploads.rb

Remove default Active Storage direct upload action

2021-09-24 13:39:15 +02:00

errbit.rb

Configure airbrake as Errbit documentation says

2023-05-29 13:50:33 +02:00

filter_parameter_logging.rb

Upgrade to Rails 6.1

2023-09-11 23:40:37 +02:00

globalize.rb

Update Globalize monkey-patch to forward kw args

2023-01-26 17:19:15 +01:00

i18n_backend.rb

Apply rule to end files with a newline character

2019-09-10 20:02:15 +02:00

i18n_pluralize.rb

Add and apply Style/RedundantInterpolation rule

2021-08-09 21:37:04 +02:00

i18n_translation.rb

Update TranslationHelper monkey-patch

2022-08-24 14:36:49 +02:00

inflections.rb

Add SDG goal model

2020-12-02 12:13:02 +01:00

invisible_captcha.rb

Disable invisible captcha spinner

2021-08-11 00:53:05 +02:00

kaminari_config.rb

removes not needed code

2017-04-03 12:30:57 +02:00

mime_types.rb

…

new_framework_defaults_6_1.rb

Use URL-safe CSRF tokens and SameSite in cookies

2023-09-11 23:40:37 +02:00

omniauth.rb

Configure OmniAuth to send log to Rails logger

2022-10-05 12:48:13 +02:00

permissions_policy.rb

Upgrade to Rails 6.1

2023-09-11 23:40:37 +02:00

recipient_interceptor.rb

Add prefix to staging emails subject

2019-01-31 11:13:23 +01:00

routes_hierarchy.rb

Remove useless answers show view

2022-09-14 14:45:35 +02:00

routing.rb

Split routes into small files for easier customization (#1852)

2018-01-09 15:49:01 -04:00

session_store.rb

Use double quotes in config/initializers

2019-03-15 10:29:03 +01:00

social_share_button.rb

Use social-share-button whatsapp icon

2021-02-08 16:31:26 +01:00

vote_extensions.rb

Extract method to get vote counts by votable type

2023-08-30 14:46:34 +02:00

wicked_pdf.rb

Remove Wicked PDF monkey patch

2023-09-11 23:40:37 +02:00

wrap_parameters.rb

updates config files

2019-04-16 17:28:06 +02:00