X-Git-Url: https://git.openstreetmap.org/rails.git/blobdiff_plain/d82cc08734552f75e7c1b5bd05b498dbb97072a4..4543e85441b758edaf7b4a8f7ed589ca428a9be7:/config/initializers/secure_headers.rb diff --git a/config/initializers/secure_headers.rb b/config/initializers/secure_headers.rb index a320836c6..daddd762d 100644 --- a/config/initializers/secure_headers.rb +++ b/config/initializers/secure_headers.rb @@ -8,7 +8,7 @@ csp_policy = { :frame_ancestors => %w['self'], :frame_src => %w['self'], :img_src => %w['self' data: www.gravatar.com *.wp.com *.tile.openstreetmap.org *.tile.thunderforest.com *.openstreetmap.fr], - :manifest_src => %w['none'], + :manifest_src => %w['self'], :media_src => %w['none'], :object_src => %w['self'], :plugin_types => %w[],