forked from asonix/mastodon
Add form-action CSP directive (#20781)
This commit is contained in:
parent
eb80789b0b
commit
7955d4b959
1 changed files with 1 additions and 0 deletions
|
@ -26,6 +26,7 @@ Rails.application.config.content_security_policy do |p|
|
|||
p.media_src :self, :https, :data, assets_host
|
||||
p.frame_src :self, :https
|
||||
p.manifest_src :self, assets_host
|
||||
p.form_action :self
|
||||
|
||||
if Rails.env.development?
|
||||
webpacker_urls = %w(ws http).map { |protocol| "#{protocol}#{Webpacker.dev_server.https? ? 's' : ''}://#{Webpacker.dev_server.host_with_port}" }
|
||||
|
|
Loading…
Reference in a new issue