Unfloyded/Legamunt
0
0
Fork 0
Code Activity

Change design of embed modal in web UI (#31801)

Browse source
This commit is contained in:
Eugen Rochko 2024-09-12 14:54:16 +02:00 • committed by GitHub
parent ab763c493f
commit 24ef8255b3
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
12 changed files with 278 additions and 245 deletions
Download patch file Download diff file Expand all files Collapse all files

11
config/initializers/content_security_policy.rb
View file

@ -38,17 +38,16 @@ Rails.application.config.content_security_policy do |p|
p.img_src :self, :data, :blob, *media_hosts
p.style_src :self, assets_host
p.media_src :self, :data, *media_hosts
p.frame_src :self, :https
p.manifest_src :self, assets_host
if sso_host.present?
p.form_action :self, sso_host
p.form_action :self, sso_host
else
p.form_action :self
p.form_action :self
end
p.child_src :self, :blob, assets_host
p.worker_src :self, :blob, assets_host
p.child_src :self, :blob, assets_host
p.worker_src :self, :blob, assets_host
if Rails.env.development?
webpacker_public_host = ENV.fetch('WEBPACKER_DEV_SERVER_PUBLIC', Webpacker.config.dev_server[:public])
@ -56,9 +55,11 @@ Rails.application.config.content_security_policy do |p|
p.connect_src :self, :data, :blob, *media_hosts, Rails.configuration.x.streaming_api_base_url, *front_end_build_urls
p.script_src :self, :unsafe_inline, :unsafe_eval, assets_host
p.frame_src :self, :https, :http
else
p.connect_src :self, :data, :blob, *media_hosts, Rails.configuration.x.streaming_api_base_url
p.script_src :self, assets_host, "'wasm-unsafe-eval'"
p.frame_src :self, :https
end
end