cst1/openstreetmap-website
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Take security policy URLs from the configuration file

Browse source
This commit is contained in:
Tom Hughes 2018-11-15 18:47:15 +00:00
parent 3db0994f3c
commit dc6a5bc1a6
1 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
app/controllers/application_controller.rb
View file

@ -414,9 +414,9 @@ class ApplicationController < ActionController::Base
append_content_security_policy_directives(
:child_src => %w[http://127.0.0.1:8111 https://127.0.0.1:8112],
:frame_src => %w[http://127.0.0.1:8111 https://127.0.0.1:8112],
:connect_src => %w[nominatim.openstreetmap.org overpass-api.de router.project-osrm.org graphhopper.com],
:connect_src => [NOMINATIM_URL, OVERPASS_URL, OSRM_URL, GRAPHHOPPER_URL],
:form_action => %w[render.openstreetmap.org],
:script_src => %w[open.mapquestapi.com],
:script_src => [MAPQUEST_DIRECTIONS_URL],
:img_src => %w[developer.mapquest.com]
)