X-Git-Url: https://git.openstreetmap.org/rails.git/blobdiff_plain/9be62ca4bbd7b761654780847bab77444f2db9a8..11e81c5398bb43d35c1b12421f7a6be2ca5b7047:/config/initializers/secure_headers.rb diff --git a/config/initializers/secure_headers.rb b/config/initializers/secure_headers.rb index daf66bfc7..c97762a37 100644 --- a/config/initializers/secure_headers.rb +++ b/config/initializers/secure_headers.rb @@ -26,11 +26,6 @@ csp_policy[:img_src] << Settings.storage_url if Settings.key?(:storage_url) csp_policy[:report_uri] << Settings.csp_report_url if Settings.key?(:csp_report_url) -cookie_policy = { - :secure => SecureHeaders::OPT_OUT, - :httponly => SecureHeaders::OPT_OUT -} - SecureHeaders::Configuration.default do |config| config.hsts = SecureHeaders::OPT_OUT @@ -44,6 +39,4 @@ SecureHeaders::Configuration.default do |config| config.csp = SecureHeaders::OPT_OUT config.csp_report_only = SecureHeaders::OPT_OUT end - - config.cookies = cookie_policy end