cst1/openstreetmap-website
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Allow configuration of storage server URL for security policy

Browse source
This commit is contained in:
Tom Hughes 2019-07-07 16:14:00 +01:00
parent 77ee8c1a53
commit 75e60acf66
2 changed files with 5 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
config/initializers/secure_headers.rb
View file

@ -21,6 +21,9 @@ csp_policy = {
csp_policy[:connect_src] << PIWIK["location"] if defined?(PIWIK)
csp_policy[:img_src] << PIWIK["location"] if defined?(PIWIK)
csp_policy[:script_src] << PIWIK["location"] if defined?(PIWIK)
csp_policy[:img_src] << Settings.storage_url if Settings.key?(:storage_url)
csp_policy[:report_uri] << Settings.csp_report_url if Settings.key?(:csp_report_url)
cookie_policy = {

2
config/settings.yml
View file

@ -124,3 +124,5 @@ csp_enforce: false
#csp_report_url: ""
# Storage service to use in production mode
storage_service: "local"
# Root URL for storage service
# storage_url: