Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fixes #24874 - update secure_headers to 6.x #6055

Merged
merged 1 commit into from Oct 4, 2018
Merged

Fixes #24874 - update secure_headers to 6.x #6055

merged 1 commit into from Oct 4, 2018

Conversation

mmoll
Copy link
Contributor

@mmoll mmoll commented Sep 10, 2018

No description provided.

@theforeman-bot
Copy link
Member

Issues: #24874

@mmoll
Copy link
Contributor Author

mmoll commented Sep 10, 2018

I didn't find any places in our code that are mentioned in the docs for breaking changes of 6.x and an update of my prod instance didn't seem to introduce any ill effects...

@tbrisker
Copy link
Member

@mmoll while i'm fine with this, i wonder if we still need it at all? iirc rails 5.2 already includes options for setting most if not all of the headers we use.

@mmoll
Copy link
Contributor Author

mmoll commented Sep 13, 2018

I'd vote for getting this in now to have a good gut feeling for the time being. 😏

I did subscribe to github/secure_headers#375 and opened https://projects.theforeman.org/issues/24934 in order to check if the current config we use is on Rails 5.2 standards.

Copy link
Member

@tbrisker tbrisker left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sure, works for me. sorry for the delay, thanks @mmoll !

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
4 participants