3 commits

Author	SHA1	Message	Date
Justin Tracey	3f8523130d	use host instead of headers to make Rack happy (#15741) ... "headers" is provided by Rails, Rack can't rely on it	2021-02-16 15:28:17 +01:00
Cecylia Bocovich	3447bd2f80	Monkey patch Rack::Session to send secure cookies to onions (#15725)	2021-02-14 00:10:52 +01:00
Claire	21fb3f3684	Drop dependency on secure_headers, fix response headers (#15712) ... * Drop dependency on secure_headers, use always_write_cookie instead * Fix cookies in Tor Hidden Services by moving configuration to application.rb * Instead of setting always_write_cookie at boot, monkey-patch ActionDispatch	2021-02-11 23:47:05 +01:00