mirror of
https://github.com/rails/rails.git
synced 2022-11-09 12:12:34 -05:00
Merge pull request #42399 from bubba/applicationcontroller-self-csp
Add 'self' to Rails::ApplicationController Content-Security-Policy
This commit is contained in:
commit
01d836fcf3
1 changed files with 2 additions and 2 deletions
|
@ -7,8 +7,8 @@ class Rails::ApplicationController < ActionController::Base # :nodoc:
|
|||
before_action :disable_content_security_policy_nonce!
|
||||
|
||||
content_security_policy do |policy|
|
||||
policy.script_src :unsafe_inline
|
||||
policy.style_src :unsafe_inline
|
||||
policy.script_src :self, :unsafe_inline
|
||||
policy.style_src :self, :unsafe_inline
|
||||
end
|
||||
|
||||
private
|
||||
|
|
Loading…
Reference in a new issue