Patch #44653 ยป 0001-Remove-leftover-development-hosts-from-the-OAuth-red.patch
| config/initializers/30-redmine.rb | ||
|---|---|---|
| 58 | 58 |
allow_token_introspection false |
| 59 | 59 | |
| 60 | 60 |
# allow http loopback redirect URIs but require https for all others |
| 61 |
force_ssl_in_redirect_uri { |uri| !%w[localhost 127.0.0.1 web localohst:8080].include?(uri.host) }
|
|
| 61 |
force_ssl_in_redirect_uri { |uri| !%w[localhost 127.0.0.1 ::1].include?(uri.hostname) }
|
|
| 62 | 62 | |
| 63 | 63 |
# Specify what redirect URI's you want to block during Application creation. |
| 64 | 64 |
forbid_redirect_uri { |uri| %w[data vbscript javascript].include?(uri.scheme.to_s.downcase) }
|