Remove script sources which are no longer needed by iD

This commit is contained in:
Tom Hughes 2018-07-26 17:44:16 +01:00
parent e418074b2a
commit 640ea955fe

View file

@ -120,7 +120,7 @@ class SiteController < ApplicationController
append_content_security_policy_directives(
:connect_src => %w[*],
:img_src => %w[* blob:],
:script_src => %w[dev.virtualearth.net *.wikipedia.org www.wikidata.org services.arcgisonline.com serviceslab.arcgisonline.com 'unsafe-eval'],
:script_src => %w[dev.virtualearth.net 'unsafe-eval'],
:style_src => %w['unsafe-inline']
)