Add form-action CSP directive (#1948)

This commit is contained in:
Claire 2022-11-16 16:28:48 +01:00 committed by GitHub
parent ad84fd25f1
commit 8c56441b4a
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -41,6 +41,7 @@ if Rails.env.production?
p.worker_src :self, :blob, assets_host p.worker_src :self, :blob, assets_host
p.connect_src :self, :blob, :data, Rails.configuration.x.streaming_api_base_url, *data_hosts p.connect_src :self, :blob, :data, Rails.configuration.x.streaming_api_base_url, *data_hosts
p.manifest_src :self, assets_host p.manifest_src :self, assets_host
p.form_action :self
end end
end end