From dc6a5bc1a60e34e7004174287f79c8a073fa012e Mon Sep 17 00:00:00 2001 From: Tom Hughes Date: Thu, 15 Nov 2018 18:47:15 +0000 Subject: [PATCH] Take security policy URLs from the configuration file --- app/controllers/application_controller.rb | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/app/controllers/application_controller.rb b/app/controllers/application_controller.rb index 70305850a..7f9ab6ead 100644 --- a/app/controllers/application_controller.rb +++ b/app/controllers/application_controller.rb @@ -414,9 +414,9 @@ class ApplicationController < ActionController::Base append_content_security_policy_directives( :child_src => %w[http://127.0.0.1:8111 https://127.0.0.1:8112], :frame_src => %w[http://127.0.0.1:8111 https://127.0.0.1:8112], - :connect_src => %w[nominatim.openstreetmap.org overpass-api.de router.project-osrm.org graphhopper.com], + :connect_src => [NOMINATIM_URL, OVERPASS_URL, OSRM_URL, GRAPHHOPPER_URL], :form_action => %w[render.openstreetmap.org], - :script_src => %w[open.mapquestapi.com], + :script_src => [MAPQUEST_DIRECTIONS_URL], :img_src => %w[developer.mapquest.com] ) -- 2.43.2