
17 Mar
2015
17 Mar
'15
11:35 a.m.
On 17/03/15 16:30, Julien Goodwin wrote:
Updated patch setting the missing anti-xss headers.
I've finally got most of the test suite running on my laptop, and found various breakages due to this, the simpler hardcoded version worked fine since I wasn't using options. I'll hopefully have a v3 patch set in a few hours that does pass tests. One notable thing which broke is the test suite does test requests via nginx with SSL, and python (at least in Debian) now does certificate validation by default, which broke a lot of the tests. I'll include a fix for that as well.