From 68b37cf6aaefa823c74c52c45a800a031cb0a881 Mon Sep 17 00:00:00 2001 From: clemkeirua Date: Wed, 8 Jul 2020 10:29:29 +0200 Subject: [PATCH] config: make default Rails 5 config explicit --- config/application.rb | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/config/application.rb b/config/application.rb index a3660b3a8..37098a13e 100644 --- a/config/application.rb +++ b/config/application.rb @@ -42,7 +42,11 @@ module TPS default_allowed_tags = ['strong', 'em', 'b', 'i', 'p', 'code', 'pre', 'tt', 'samp', 'kbd', 'var', 'sub', 'sup', 'dfn', 'cite', 'big', 'small', 'address', 'hr', 'br', 'div', 'span', 'h1', 'h2', 'h3', 'h4', 'h5', 'h6', 'ul', 'ol', 'li', 'dl', 'dt', 'dd', 'abbr', 'acronym', 'a', 'img', 'blockquote', 'del', 'ins'] config.action_view.sanitized_allowed_tags = default_allowed_tags + ['u'] + config.action_controller.per_form_csrf_tokens = nil + config.action_controller.forgery_protection_origin_check = nil + ActiveSupport.to_time_preserves_timezone = false config.active_record.belongs_to_required_by_default = false + config.ssl_options = {} # Some mobile browsers have a behaviour where, although they will delete the session # cookie when the browser shutdowns, they will still serve a cached version