History

Fix missing nonce in production CSP

Thibaut Courouble committed 10 years ago

Commit 6428cee1 parent 48123301 file · +1 −1Browse files

Unified · Split

lib/app.rb+1−1
@@ -73,7 +73,7 @@ class App < Sinatra::Application · 72 unmodified lines
73 configure :production do73 configure :production do
74 set :static, false74 set :static, false
75 set :docs_host, '//docs.devdocs.io'75 set :docs_host, '//docs.devdocs.io'
76 set :csp, "default-src 'self' *; script-src 'self' http://cdn.devdocs.io https://cdn.devdocs.io https://www.google-analytics.com https://secure.gaug.es http://*.jquery.com https://*.jquery.com; font-src data:; style-src 'self' 'unsafe-inline' *; img-src 'self' * data:;"76 set :csp, "default-src 'self' *; script-src 'self' 'nonce-devdocs' http://cdn.devdocs.io https://cdn.devdocs.io https://www.google-analytics.com https://secure.gaug.es http://*.jquery.com https://*.jquery.com; font-src data:; style-src 'self' 'unsafe-inline' *; img-src 'self' * data:;"
77 77
78 use Rack::ConditionalGet78 use Rack::ConditionalGet
79 use Rack::ETag79 use Rack::ETag