From 0d40cdd03a0ee3df47864ae570bfc98bafd2c42b Mon Sep 17 00:00:00 2001
From: Sebastian Serth <Sebastian.Serth@hpi.de>
Date: Wed, 7 Sep 2022 21:41:09 +0200
Subject: [PATCH] [CSP] Allow 'self' as base-uri

---
 config/initializers/content_security_policy.rb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/config/initializers/content_security_policy.rb b/config/initializers/content_security_policy.rb
index 07bc82ea..9bef6035 100644
--- a/config/initializers/content_security_policy.rb
+++ b/config/initializers/content_security_policy.rb
@@ -33,7 +33,7 @@ end
 
 Rails.application.config.content_security_policy do |policy|
   policy.default_src          :none
-  policy.base_uri             :none
+  policy.base_uri             :self
   policy.font_src             :self
   # Code executions might return a base64 encoded image as a :data URI
   policy.img_src              :self, :data