diff options
| author | Claire <claire.github-309c@sitedethib.com> | 2022-05-26 23:14:09 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2022-05-26 23:14:09 +0200 |
| commit | 6d13901e4c1f660a25420b623cbfea6966b218b9 (patch) | |
| tree | c1376f9a3a7533c2d43fc9e281c92d168e941846 /config/initializers | |
| parent | a33a0f69523298520704b98d4dc7fdd1accae642 (diff) | |
| parent | 7c6fff34d059c90eafdb1beeb2597a9606453582 (diff) | |
Merge pull request #1785 from ClearlyClaire/glitch-soc/merge-upstream
Merge upstream changes
Diffstat (limited to 'config/initializers')
| -rw-r--r-- | config/initializers/doorkeeper.rb | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/config/initializers/doorkeeper.rb b/config/initializers/doorkeeper.rb index f78db8653..84b649f5c 100644 --- a/config/initializers/doorkeeper.rb +++ b/config/initializers/doorkeeper.rb @@ -128,6 +128,13 @@ Doorkeeper.configure do # force_ssl_in_redirect_uri false + # Specify what redirect URI's you want to block during Application creation. + # Any redirect URI is whitelisted by default. + # + # You can use this option in order to forbid URI's with 'javascript' scheme + # for example. + forbid_redirect_uri { |uri| %w[data vbscript javascript].include?(uri.scheme.to_s.downcase) } + # Specify what grant flows are enabled in array of Strings. The valid # strings and the flows they enable are: # |