DGNum/demarches-normaliennes
14
1
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity

remove duplicate csp

Browse source
This commit is contained in:
simon lehericey 2022-03-23 11:24:10 +01:00 committed by Paul Chavard
parent 187e84a010
commit 250b699664
1 changed files with 0 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
config/initializers/content_security_policy.rb
View file

@ -47,7 +47,6 @@ Rails.application.config.content_security_policy do |policy|
# Allow Vite.js
policy.connect_src(*policy.connect_src, "ws://#{ViteRuby.config.host_with_port}")
policy.script_src(*policy.script_src, :unsafe_eval, "http://#{ViteRuby.config.host_with_port}")
policy.style_src(*policy.style_src, :unsafe_inline)
# CSP are not enforced in development (see content_security_policy_report_only in development.rb)
# However we notify a random local URL, to see breakage in the DevTools when adding a new external resource.