|
|
@ -26,6 +26,7 @@ Rails.application.config.content_security_policy do |p|
|
|
|
|
p.media_src :self, :https, :data, assets_host
|
|
|
|
p.media_src :self, :https, :data, assets_host
|
|
|
|
p.frame_src :self, :https
|
|
|
|
p.frame_src :self, :https
|
|
|
|
p.manifest_src :self, assets_host
|
|
|
|
p.manifest_src :self, assets_host
|
|
|
|
|
|
|
|
p.form_action :self
|
|
|
|
|
|
|
|
|
|
|
|
if Rails.env.development?
|
|
|
|
if Rails.env.development?
|
|
|
|
webpacker_urls = %w(ws http).map { |protocol| "#{protocol}#{Webpacker.dev_server.https? ? 's' : ''}://#{Webpacker.dev_server.host_with_port}" }
|
|
|
|
webpacker_urls = %w(ws http).map { |protocol| "#{protocol}#{Webpacker.dev_server.https? ? 's' : ''}://#{Webpacker.dev_server.host_with_port}" }
|
|
|
|