On 17/03/15 16:30, Julien Goodwin wrote:
Updated patch setting the missing anti-xss headers.
I've finally got most of the test suite running on my laptop, and found
various breakages due to this, the simpler hardcoded version worked fine
since I wasn't using options.
I'll hopefully have a v3 patch set in a few hours that does pass tests.
One notable thing which broke is the test suite does test requests via
nginx with SSL, and python (at least in Debian) now does certificate
validation by default, which broke a lot of the tests. I'll include a
fix for that as well.