From: Tom Hughes <tom@compton.nu>
Date: Sun, 24 Feb 2019 22:40:01 +0000 (+0000)
Subject: Allow loading of our manifest
X-Git-Tag: live~2700
X-Git-Url: https://git.openstreetmap.org/rails.git/commitdiff_plain/89a4a9d59cb4695d143b4edcf9d0d5e8eb9ea3ee

Allow loading of our manifest
---

diff --git a/config/initializers/secure_headers.rb b/config/initializers/secure_headers.rb
index a320836c6..daddd762d 100644
--- a/config/initializers/secure_headers.rb
+++ b/config/initializers/secure_headers.rb
@@ -8,7 +8,7 @@ csp_policy = {
   :frame_ancestors => %w['self'],
   :frame_src => %w['self'],
   :img_src => %w['self' data: www.gravatar.com *.wp.com *.tile.openstreetmap.org *.tile.thunderforest.com *.openstreetmap.fr],
-  :manifest_src => %w['none'],
+  :manifest_src => %w['self'],
   :media_src => %w['none'],
   :object_src => %w['self'],
   :plugin_types => %w[],