github-mirror/discourse
2
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2025-05-31 14:48:03 +08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

DEV: Add manifest-src to CSP (#13319)

Browse Source 
Defaults to `manifest-src: 'self'` and allows plugins/themes to extend it.
This commit is contained in:
Penar Musaraj
2021-06-08 09:32:31 -04:00
committed by GitHub
parent 9e426d33c7
commit 8336e732d3
4 changed files with 14 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
spec/fixtures/plugins/csp_extension/plugin.rb vendored
View File

@ -8,5 +8,6 @@
extend_content_security_policy(
script_src: ['https://from-plugin.com'],
object_src: ['https://test-stripping.com'],
frame_ancestors: ['https://frame-ancestors-plugin.ext']
frame_ancestors: ['https://frame-ancestors-plugin.ext'],
manifest_src: ['https://manifest-src.com']
)