treehouse
/
mastodon
21
8
Fork 5
Code Issues 32 Pull Requests Projects 1 Releases Wiki Activity

Add manifest_src to CSP 

Fixes manifest.json not being loaded because of CSP violation

h/t https://vulpine.club/@binary/100662852252438648
lolsob-rspec
Rey Tucker 2018-09-03 13:05:03 -04:00 committed by ThibG
parent 34ecec8c85
commit 121747b190
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
config/initializers/content_security_policy.rb
View File

@ -27,6 +27,7 @@ if Rails.env.production?
p.frame_src :self, :https p.frame_src :self, :https
p.worker_src :self, assets_host p.worker_src :self, assets_host
p.connect_src :self, :blob, Rails.configuration.x.streaming_api_base_url, *data_hosts p.connect_src :self, :blob, Rails.configuration.x.streaming_api_base_url, *data_hosts
p.manifest_src :self, :https
end end
end end