Add form-action CSP directive (#1948)

2022-11-16 16:28:48 +01:00
parent ad84fd25f1
commit 8c56441b4a
1 changed files with 1 additions and 0 deletions
--- a/config/initializers/content_security_policy.rb
+++ b/config/initializers/content_security_policy.rb
@@ -41,6 +41,7 @@ if Rails.env.production?
    p.worker_src      :self, :blob, assets_host
    p.connect_src     :self, :blob, :data, Rails.configuration.x.streaming_api_base_url, *data_hosts
    p.manifest_src    :self, assets_host
+    p.form_action     :self
  end
 end