Commit 2c2f6492 authored by Thibaut Girka's avatar Thibaut Girka Committed by ThibG

Fix CSP when PAPERCLIP_ROOT_URL is set to a different host

parent 58720aa2
......@@ -15,8 +15,16 @@ if Rails.env.production?
else
attachments_host = nil
end
data_hosts << attachments_host unless attachments_host.nil?
if ENV['PAPERCLIP_ROOT_URL']
url = Addressable::URI.parse(assets_host) + ENV['PAPERCLIP_ROOT_URL']
data_hosts << "https://#{url.host}"
end
data_hosts.uniq!
Rails.application.config.content_security_policy do |p|
p.base_uri :none
p.default_src :none
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment