I improved Pleroma's http_security plugin by deleting the report_uri, insecure upgrade feature, then adding the static_url to the CSP.

Reduced bloat and improved support for dual homed clearnet-hidden service. @alex @lanodan

I am currently violating AGPLv3 by not publishing these changes. You must beat me in 1v1 typeracer to get them.