The edge already redirects http:// to https://, but without HSTS the first request of every visit can still go out in the clear. Turn on Rack::Protection's StrictTransport for the bingo app: one year, this host only, no preload. Assisted-by: Claude:opus-5 |
||
|---|---|---|
| .. | ||
| admin_acl_test.rb | ||
| admin_auth_test.rb | ||
| app_test.rb | ||
| bingo_test.rb | ||
| crypto_test.rb | ||
| fmt_test.rb | ||
| invoice_cancel_test.rb | ||
| invoice_stats_test.rb | ||
| invoice_test.rb | ||
| payout_address_test.rb | ||
| rate_limit_test.rb | ||
| templates_test.rb | ||
| test_helper.rb | ||
| users_admin_test.rb | ||