Enforce CSP in dev environment

Thibaut Courouble committed 10 years ago

Commit bdda2fb1 parent d9e64f91 file · +2 −0Browse files

Unified · Split

lib/app.rb+2−0

@@ -66,6 +66,8 @@ class App < Sinatra::Application · 65 unmodified lines
66	66	use BetterErrors::Middleware
67	67	BetterErrors.application_root = File.expand_path('..', __FILE__)
68	68	BetterErrors.editor = :sublime
	69	+
	70	+ set :csp, "default-src 'self' ; script-src 'self' 'unsafe-inline' ; font-src data:; style-src 'self' 'unsafe-inline' ; img-src 'self' data:;"
69	71	end
70	72
71	73	configure :production do