You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
20 lines
892 B
20 lines
892 B
diff --git a/config/initializers/content_security_policy.rb b/config/initializers/content_security_policy.rb
|
|
index cb5629337..bf7b7edb0 100644
|
|
--- a/config/initializers/content_security_policy.rb
|
|
+++ b/config/initializers/content_security_policy.rb
|
|
@@ -16,11 +16,13 @@ media_host ||= host_to_url(ENV['S3_CLOUDFRONT_HOST'])
|
|
media_host ||= host_to_url(ENV['S3_HOSTNAME']) if ENV['S3_ENABLED'] == 'true'
|
|
media_host ||= assets_host
|
|
|
|
+google_fonts_host = "https://fonts.gstatic.com" # Google Fonts
|
|
+
|
|
Rails.application.config.content_security_policy do |p|
|
|
p.base_uri :none
|
|
p.default_src :none
|
|
p.frame_ancestors :none
|
|
- p.font_src :self, assets_host
|
|
+ p.font_src :self, assets_host, google_fonts_host
|
|
p.img_src :self, :https, :data, :blob, assets_host
|
|
p.style_src :self, assets_host
|
|
p.media_src :self, :https, :data, assets_host
|