github-mirror/discourse
2
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2025-06-04 23:36:11 +08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

FEATURE: allow extending CSP base-uri and object-src

Browse Source 
Plus, ensure :none is stripped, it cannot be combined with other sources
This commit is contained in:
Penar Musaraj
2019-01-09 15:33:42 -05:00
parent 9ba8bfb1aa
commit e11c6ffa89
3 changed files with 8 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
spec/fixtures/plugins/csp_extension/plugin.rb vendored
View File

@ -4,5 +4,6 @@
# authors: xrav3nz
extend_content_security_policy(
script_src: ['https://from-plugin.com']
script_src: ['https://from-plugin.com'],
object_src: ['https://test-stripping.com']
)