add security policy

2019-05-03 15:25:51 +02:00 · 2019-05-03 15:25:51 +02:00 · 8582b08a98
commit 8582b08a98
parent 58c71ddee6
3 changed files with 26 additions and 0 deletions
--- a/config/environments/production.rb
+++ b/config/environments/production.rb
@ -109,5 +109,7 @@ Rails.application.configure do
    host: ENV['APP_HOST']
  }

+  config.content_security_policy_report_only = true
+
  config.lograge.enabled = ENV['LOGRAGE_ENABLED'] == 'enabled'
 end