diff options
| author | Guillermo Iguaran <guilleiguaran@gmail.com> | 2018-11-06 18:11:15 -0500 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2018-11-06 18:11:15 -0500 |
| commit | 90ee327b632f454c3cd7265be5f96a74d160c536 (patch) | |
| tree | f3d011815b0068c811bff8468c43f16229596823 /railties/lib | |
| parent | bb11a9acab15b87d6074fb6af9405287942a7eee (diff) | |
| parent | fd30a3237c572fc9727a4dc59edbb08b6569a761 (diff) | |
| download | rails-90ee327b632f454c3cd7265be5f96a74d160c536.tar.gz rails-90ee327b632f454c3cd7265be5f96a74d160c536.tar.bz2 rails-90ee327b632f454c3cd7265be5f96a74d160c536.zip | |
Merge pull request #34375 from y-yagi/add_connect_src_to_default_csp_initializer
Add `connect_src` example to content security policy initializer
Diffstat (limited to 'railties/lib')
| -rw-r--r-- | railties/lib/rails/generators/rails/app/templates/config/initializers/content_security_policy.rb.tt | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/railties/lib/rails/generators/rails/app/templates/config/initializers/content_security_policy.rb.tt b/railties/lib/rails/generators/rails/app/templates/config/initializers/content_security_policy.rb.tt index d3bcaa5ec8..c517b0f96b 100644 --- a/railties/lib/rails/generators/rails/app/templates/config/initializers/content_security_policy.rb.tt +++ b/railties/lib/rails/generators/rails/app/templates/config/initializers/content_security_policy.rb.tt @@ -11,6 +11,10 @@ # policy.object_src :none # policy.script_src :self, :https # policy.style_src :self, :https +<%- unless options[:skip_javascript] -%> +# # If you are using webpack-dev-server then specify webpack-dev-server host +# policy.connect_src :self, :https, "http://localhost:3035", "ws://localhost:3035" if Rails.env.development? +<%- end -%> # # Specify URI for violation reports # # policy.report_uri "/csp-violation-report-endpoint" |