mirror of
https://github.com/rails/rails.git
synced 2022-11-09 12:12:34 -05:00
1704be74ee
Prior to this commit, when multiple cookie domains were specified, the first domain that was a substring of the request host was chosen. This allowed, for example, the "example.com" domain to be chosen when the request host was "example.com.au" or even "myexample.com". This commit ensures a domain is chosen only if it is equal to or is a superdomain of the request host. Fixes #37760. |
||
---|---|---|
.. | ||
http | ||
journey | ||
middleware | ||
request | ||
routing | ||
system_testing | ||
testing | ||
journey.rb | ||
railtie.rb | ||
routing.rb | ||
system_test_case.rb |