]> git.openstreetmap.org Git - rails.git/commit
Block object-src in security policy
authorTom Hughes <tom@compton.nu>
Tue, 28 Apr 2026 18:06:06 +0000 (19:06 +0100)
committerTom Hughes <tom@compton.nu>
Tue, 28 Apr 2026 18:06:06 +0000 (19:06 +0100)
commit00fef8b61d8def4bce5d6e63abb11dfaf675a0c1
tree284778fe86182c8acbb9bec395cfce5a37dc9f05
parentc9fcffd7b8415a7e8632026381bf03bad8c5b908
Block object-src in security policy

This is ancient history from when we had a flash based editor
though I'm not sure this rule was really needed even then.

Reported-by: Jorge Gonzalez Milla <jorge@jmilla.es>
config/initializers/content_security_policy.rb