Add manifest_src to CSP

Fixes manifest.json not being loaded because of CSP violation

h/t https://vulpine.club/@binary/100662852252438648
This commit is contained in:
Rey Tucker 2018-09-03 13:05:03 -04:00 committed by ThibG
parent bd437f8077
commit 40d04a3209
1 changed files with 1 additions and 0 deletions

View File

@ -27,6 +27,7 @@ if Rails.env.production?
p.frame_src :self, :https p.frame_src :self, :https
p.worker_src :self, assets_host p.worker_src :self, assets_host
p.connect_src :self, :blob, Rails.configuration.x.streaming_api_base_url, *data_hosts p.connect_src :self, :blob, Rails.configuration.x.streaming_api_base_url, *data_hosts
p.manifest_src :self, :https
end end
end end