History

Enforce CSP in dev environment

Thibaut Courouble committed 10 years ago

Commit bdda2fb1 parent d9e64f91 file · +2 −0Browse files

Unified · Split

lib/app.rb+2−0
@@ -66,6 +66,8 @@ class App < Sinatra::Application · 65 unmodified lines
6666 use BetterErrors::Middleware
6767 BetterErrors.application_root = File.expand_path('..', __FILE__)
6868 BetterErrors.editor = :sublime
69+
70+ set :csp, "default-src 'self' *; script-src 'self' 'unsafe-inline' *; font-src data:; style-src 'self' 'unsafe-inline' *; img-src 'self' * data:;"
6971 end
7072
7173 configure :production do