cst1/openstreetmap-website
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Allow trace image URL to be configured in the CSP policy

Browse source
This commit is contained in:
Tom Hughes 2022-02-13 19:25:42 +00:00
parent 53aa7259bb
commit 1612ea75c5
4 changed files with 16 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

3
config/initializers/secure_headers.rb
View file

@ -22,7 +22,8 @@ csp_policy[:connect_src] << PIWIK["location"] if defined?(PIWIK)
csp_policy[:img_src] << PIWIK["location"] if defined?(PIWIK)
csp_policy[:script_src] << PIWIK["location"] if defined?(PIWIK)
csp_policy[:img_src] << Settings.storage_url if Settings.key?(:storage_url)
csp_policy[:img_src] << Settings.avatar_storage_url if Settings.key?(:avatar_storage_url)
csp_policy[:img_src] << Settings.trace_image_storage_url if Settings.key?(:trace_image_storage_url)
csp_policy[:report_uri] << Settings.csp_report_url if Settings.key?(:csp_report_url)