Fix Content-Security-Policy when using sso-redirect (#32241)

2024-11-23 22:57:05 +09:00 · 2024-10-04 10:50:36 +02:00 · 2024-10-04 10:50:36 +02:00 · 49407e7623
commit 49407e7623
parent cf28104317
1 changed files with 1 additions and 1 deletions
--- a/app/controllers/concerns/web_app_controller_concern.rb
+++ b/app/controllers/concerns/web_app_controller_concern.rb
@ -13,7 +13,7 @@ module WebAppControllerConcern
      policy = ContentSecurityPolicy.new

      if policy.sso_host.present?
-        p.form_action policy.sso_host
+        p.form_action policy.sso_host, -> { "https://#{request.host}/auth/auth/" }
      else
        p.form_action :none
      end