djsundog
/
tootlab-mastodon
mirror of https://github.com/glitch-soc/mastodon.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Add manifest_src to CSP 

Fixes manifest.json not being loaded because of CSP violation

h/t https://vulpine.club/@binary/100662852252438648
This commit is contained in:
Rey Tucker 2018-09-03 13:05:03 -04:00 committed by ThibG
parent bd437f8077
commit 40d04a3209
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
config/initializers/content_security_policy.rb
View File

@ -27,6 +27,7 @@ if Rails.env.production?
p.frame_src :self, :https p.frame_src :self, :https
p.worker_src :self, assets_host p.worker_src :self, assets_host
p.connect_src :self, :blob, Rails.configuration.x.streaming_api_base_url, *data_hosts p.connect_src :self, :blob, Rails.configuration.x.streaming_api_base_url, *data_hosts
p.manifest_src :self, :https
end end
end end