htwkmooc/codeocean
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

CSP: Extract JavaScript from layout to assets

Browse Source 
Fixes CODEOCEAN-CP
This commit is contained in:
Sebastian Serth
2022-11-16 19:19:03 +01:00
parent a9c642a116
commit f17718f69f
6 changed files with 46 additions and 30 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
config/initializers/content_security_policy.rb
View File

@ -56,10 +56,10 @@ Rails.application.config.content_security_policy do |policy|
end
# If you are using UJS then enable automatic nonce generation
Rails.application.config.content_security_policy_nonce_generator = ->(request) { request.session.id.to_s }
# Rails.application.config.content_security_policy_nonce_generator = ->(request) { request.session.id.to_s }
# Set the nonce only to specific directives
Rails.application.config.content_security_policy_nonce_directives = %w[script-src]
# Rails.application.config.content_security_policy_nonce_directives = %w[script-src]
# Report CSP violations to a specified URI
# For further information see the following documentation: