|
@ -19,7 +19,7 @@ media_host ||= assets_host |
|
|
Rails.application.config.content_security_policy do |p| |
|
|
Rails.application.config.content_security_policy do |p| |
|
|
p.base_uri :none |
|
|
p.base_uri :none |
|
|
p.default_src :none |
|
|
p.default_src :none |
|
|
p.frame_ancestors :none |
|
|
|
|
|
|
|
|
p.frame_ancestors '*.closed.social', 'closed.social' |
|
|
p.font_src :self, assets_host |
|
|
p.font_src :self, assets_host |
|
|
p.img_src :self, :https, :data, :blob, assets_host |
|
|
p.img_src :self, :https, :data, :blob, assets_host |
|
|
p.style_src :self, :unsafe_inline, assets_host |
|
|
p.style_src :self, :unsafe_inline, assets_host |
|
|