Commit Graph

6 Commits (d5d0beb3ce6cae6af97c07b66b1edf9e1e33baa6)

Author SHA1 Message Date
Ariadne Conill 58084104ee th: config: CSP: allow unsafe-eval (script) and unsafe-inline (style)
th: config: CSP: add unsafe-eval for scripts

th: config: CSP: allow unsafe-inline for CSS

Maintained-by: kouhai <kouhai@treehouse.systems>
2024-07-14 12:00:21 -07:00
Matt Jankowski 0d397db5dd
Consolidate system specs into single directory, use rspec tags for configuration (#30206) 2024-05-10 12:36:09 +00:00
Matt Jankowski 96013cd576
Reduce `RSpec/ExampleLength` in CSP request spec (#29104) 2024-03-13 08:22:32 +00:00
Claire bd415af9a1
Change streaming API host to not be overridden to localhost in development mode (#28557) 2024-01-03 10:23:58 +00:00
Claire 85662a5a57
Change `img-src` and `media-src` CSP directives to not include `https:` (#28025) 2023-11-30 13:47:01 +00:00
Claire e5f1000ad1
Fix CSP headers being unintendedly wide (#26105) 2023-07-21 13:34:15 +02:00