Remove unsafe-inline form default style policy

2018-05-16 20:40:55 +01:00 · 2018-05-16 20:40:55 +01:00 · 1f1029cf1a
commit 1f1029cf1a
parent fdd4361d5b
1 changed files with 1 additions and 1 deletions
--- a/config/initializers/secure_headers.rb
+++ b/config/initializers/secure_headers.rb
@ -12,7 +12,7 @@ if defined?(CSP_REPORT_URL)
    :object_src => %w['self'],
    :plugin_types => %w[],
    :script_src => %w['self'],
-    :style_src => %w['self' 'unsafe-inline'],
+    :style_src => %w['self'],
    :report_uri => [CSP_REPORT_URL]
  }