mirror of
https://github.com/meteor/meteor.git
synced 2026-05-02 03:01:46 -04:00
* Adding "foo.com" to your CSP via browser-policy now adds both "http://foo.com" and "https://foo.com". This smooths over the fact that some browsers interpret "foo.com" as "http://foo.com" and some interpret it as http AND https. * Trim trailing slashes from origins. Firefox does not allow content from foo.com if you add "foo.com/" to your CSP.