discourse/config/initializers/011-rack-protection.rb

# frozen_string_literal: true

require 'rack/protection'

Rails.configuration.middleware.use Rack::Protection::FrameOptions
DEV: enable frozen string literal on all files This reduces chances of errors where consumers of strings mutate inputs and reduces memory usage of the app. Test suite passes now, but there may be some stuff left, so we will run a few sites on a branch prior to merging 2019-05-02 17:17:27 -05:00			`# frozen_string_literal: true`

require `X-Frame-Options: SAMEORIGIN` for clickjack prevention 2013-10-28 17:14:08 -05:00			`require 'rack/protection'`

Don't blow up if Redis switches to READONLY 2015-04-24 12:10:43 -05:00			`Rails.configuration.middleware.use Rack::Protection::FrameOptions`