History

Enforce CSP in dev environment

Thibaut Courouble committed 10 years ago

Commit bdda2fb1 parent d9e64f91 file · +2 −0Browse files

Unified · Split

lib/app.rb+2−0
@@ -66,6 +66,8 @@ class App < Sinatra::Application · 65 unmodified lines
66 use BetterErrors::Middleware66 use BetterErrors::Middleware
67 BetterErrors.application_root = File.expand_path('..', __FILE__)67 BetterErrors.application_root = File.expand_path('..', __FILE__)
68 BetterErrors.editor = :sublime68 BetterErrors.editor = :sublime
69
70 set :csp, "default-src 'self' *; script-src 'self' 'unsafe-inline' *; font-src data:; style-src 'self' 'unsafe-inline' *; img-src 'self' * data:;"
69 end71 end
70 72
71 configure :production do73 configure :production do