cst1/openstreetmap-website
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Update secure_headers configuration for upstream changes

Browse source
This commit is contained in:
Tom Hughes 2017-09-08 16:49:28 +01:00
parent 448bdb2454
commit e7e85db0c8
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
config/initializers/secure_headers.rb
View file

@ -9,7 +9,7 @@ if defined?(CSP_REPORT_URL)
:img_src => %w['self' data: www.gravatar.com *.wp.com *.tile.openstreetmap.org *.tile.thunderforest.com *.openstreetmap.fr],
:media_src => %w['none'],
:object_src => %w['self'],
:plugin_types => %w['none'],
:plugin_types => %w[],
:script_src => %w['self'],
:style_src => %w['self' 'unsafe-inline'],
:report_uri => [CSP_REPORT_URL]