about summary refs log tree commit diff
path: root/app/views/layouts/embedded.html.haml
diff options
context:
space:
mode:
authorEugen Rochko <eugen@zeonfederated.com>2020-11-06 11:56:31 +0100
committerGitHub <noreply@github.com>2020-11-06 11:56:31 +0100
commit9b1f2a4b61660f9a8be62f6296d97a856e376059 (patch)
treedd60029f03394a924d7168277582f0e6c835a9a1 /app/views/layouts/embedded.html.haml
parent68d4b2b83e124719f8473489ee8c1743ca848dc4 (diff)
Add subresource integrity for JS and CSS assets (#15096)
Fix #2744
Diffstat (limited to 'app/views/layouts/embedded.html.haml')
-rw-r--r--app/views/layouts/embedded.html.haml4
1 files changed, 2 insertions, 2 deletions
diff --git a/app/views/layouts/embedded.html.haml b/app/views/layouts/embedded.html.haml
index 37051e70c..e4311d342 100644
--- a/app/views/layouts/embedded.html.haml
+++ b/app/views/layouts/embedded.html.haml
@@ -11,8 +11,8 @@
     - if storage_host?
       %link{ rel: 'dns-prefetch', href: storage_host }/
 
-    = stylesheet_pack_tag 'common', media: 'all'
-    = stylesheet_pack_tag Setting.default_settings['theme'], media: 'all'
+    = stylesheet_pack_tag 'common', media: 'all', crossorigin: 'anonymous'
+    = stylesheet_pack_tag Setting.default_settings['theme'], media: 'all', crossorigin: 'anonymous'
     = javascript_pack_tag 'common', integrity: true, crossorigin: 'anonymous'
     = javascript_pack_tag "locale_#{I18n.locale}", integrity: true, crossorigin: 'anonymous'
     = render_initial_state