Unified · Split
| @@ -73,7 +73,7 @@ class App < Sinatra::Application · 72 unmodified lines | ||
| 73 | 73 | configure :production do |
| 74 | 74 | set :static, false |
| 75 | 75 | set :docs_host, '//docs.devdocs.io' |
| 76 | − set :csp, "default-src 'self' *; script-src 'self' http://cdn.devdocs.io https://cdn.devdocs.io https://www.google-analytics.com https://secure.gaug.es http://*.jquery.com https://*.jquery.com; font-src data:; style-src 'self' 'unsafe-inline' *; img-src 'self' * data:;" | |
| 76 | + set :csp, "default-src 'self' *; script-src 'self' 'nonce-devdocs' http://cdn.devdocs.io https://cdn.devdocs.io https://www.google-analytics.com https://secure.gaug.es http://*.jquery.com https://*.jquery.com; font-src data:; style-src 'self' 'unsafe-inline' *; img-src 'self' * data:;" | |
| 77 | 77 | |
| 78 | 78 | use Rack::ConditionalGet |
| 79 | 79 | use Rack::ETag |