Fix CSP headers when S3_ALIAS_HOST includes a path component (#25273)

2023-06-05 17:35:05 +02:00 · 2023-06-05 17:35:05 +02:00 · f2dbbcdec5
parent 21f904b344
commit f2dbbcdec5
1 changed files with 1 additions and 1 deletions
--- a/config/initializers/content_security_policy.rb
+++ b/config/initializers/content_security_policy.rb
@ -3,7 +3,7 @@
 # https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy

 def host_to_url(str)
-  "http#{Rails.configuration.x.use_https ? 's' : ''}://#{str}" if str.present?
+  "http#{Rails.configuration.x.use_https ? 's' : ''}://#{str}".split('/').first if str.present?
 end

 base_host = Rails.configuration.x.web_domain