Extend form-action policies for Chrome
authorTom Hughes <tom@compton.nu>
Sat, 25 Nov 2017 12:04:02 +0000 (12:04 +0000)
committerTom Hughes <tom@compton.nu>
Sat, 25 Nov 2017 12:04:02 +0000 (12:04 +0000)
commit986779966bb5aae241b350c3a948267fb8ceb594
tree1c9d31bfd896fdbfecb14901368c3480cb5e30df
parenta3519348c6c2b461dd0bbaeede01ecca1939090d
Extend form-action policies for Chrome

It seems that unlike other browsers Chrome requires that if a form
submission redirects that the redirected URL also match the form-action
policy rather than just requiring the original URL to match.
app/controllers/application_controller.rb
app/controllers/oauth_controller.rb
app/controllers/user_controller.rb