Add environment variable to specify extra data hosts

Fixes #1276
2020-02-06 11:25:18 +01:00
parent 885e9227c6
commit ccaefd139d
2 changed files with 7 additions and 0 deletions
--- a/config/initializers/content_security_policy.rb
+++ b/config/initializers/content_security_policy.rb
@@ -23,6 +23,8 @@ if Rails.env.production?
    data_hosts << "https://#{url.host}"
  end

+  data_hosts.concat(ENV['EXTRA_DATA_HOSTS'].split('|')) if ENV['EXTRA_DATA_HOSTS']
+
  data_hosts.uniq!

  Rails.application.config.content_security_policy do |p|