From e7e85db0c88ae9e85541027eccec77b150f4ef0e Mon Sep 17 00:00:00 2001 From: Tom Hughes Date: Fri, 8 Sep 2017 16:49:28 +0100 Subject: [PATCH] Update secure_headers configuration for upstream changes --- config/initializers/secure_headers.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/initializers/secure_headers.rb b/config/initializers/secure_headers.rb index 59fe4225d..361fb3283 100644 --- a/config/initializers/secure_headers.rb +++ b/config/initializers/secure_headers.rb @@ -9,7 +9,7 @@ if defined?(CSP_REPORT_URL) :img_src => %w['self' data: www.gravatar.com *.wp.com *.tile.openstreetmap.org *.tile.thunderforest.com *.openstreetmap.fr], :media_src => %w['none'], :object_src => %w['self'], - :plugin_types => %w['none'], + :plugin_types => %w[], :script_src => %w['self'], :style_src => %w['self' 'unsafe-inline'], :report_uri => [CSP_REPORT_URL] -- 2.43.2