Skip to content

normalize domains with trailing slashes #477

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
fletchto99 merged 7 commits into from
Dec 16, 2025
Merged

normalize domains with trailing slashes #477

Changes from 1 commit
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
0d44152
normalize domains with trailing slashes
keithamus Mar 30, 2022
6ffcee7
fix: allow URIs with schema to have trailing slashes normalised
keithamus Apr 4, 2022
67ca492
fix typo
keithamus Apr 4, 2022
b3ac1ad
Merge branch 'main' into normalize-domains-with-slashes
fletchto99 Dec 15, 2025
756b616
Fix merge to remove old code
fletchto99 Dec 15, 2025
9481f61
Merge remote-tracking branch 'origin/feature-7.2' into normalize-doma…
fletchto99 Dec 15, 2025
a4a4b1b
Fix tests (sources are no longer minified since #499)
fletchto99 Dec 16, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
fix typo 
Co-authored-by: Dusty Greif <[email protected]>
  • Loading branch information
@keithamus @dgreif
keithamus and dgreif committed Apr 4, 2022
commit 67ca492b445f626fb9ca55c298efa211fdf4538d
2 changes: 1 addition & 1 deletion lib/secure_headers/headers/content_security_policy.rb
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -150,7 +150,7 @@ def reject_all_values_if_none(source_list)

def normalize_uri_paths(source_list)
source_list.map do |source|
# Normalize domains ending in a single / as without omitting the slash accomplisheg the same.
# Normalize domains ending in a single / as without omitting the slash accomplishes the same.
# https://www.w3.org/TR/CSP3/#match-paths § 6.6.2.10 Step 2
begin
uri = URI(source)
Expand Down