about summary refs log tree commit diff
path: root/config/initializers
diff options
context:
space:
mode:
authormultiple creatures <dev@multiple-creature.party>2020-01-15 21:30:57 -0600
committermultiple creatures <dev@multiple-creature.party>2020-01-15 21:30:57 -0600
commit8c02372012b563aa2e8aef31c85516bf1e79f876 (patch)
tree436962b911fc319e0ea1f3a9bd217e387d7e859a /config/initializers
parent729a32d2a5b3a0a2c057842cf5337c73e0f36686 (diff)
merge upstream csp changes
Diffstat (limited to 'config/initializers')
-rw-r--r--config/initializers/content_security_policy.rb4
1 files changed, 2 insertions, 2 deletions
diff --git a/config/initializers/content_security_policy.rb b/config/initializers/content_security_policy.rb
index b6a18d1ed..cd696526d 100644
--- a/config/initializers/content_security_policy.rb
+++ b/config/initializers/content_security_policy.rb
@@ -35,8 +35,8 @@ if Rails.env.production?
     p.style_src       :self, :unsafe_inline, assets_host
     p.media_src       :self, :data, *data_hosts, "pool.jortage.com", "blob.jortage.com"
     p.frame_src       :self, :https
-    p.worker_src      :self, assets_host
-    p.connect_src     :self, :blob, Rails.configuration.x.streaming_api_base_url, *data_hosts
+    p.worker_src      :self, :blob, assets_host
+    p.connect_src     :self, :blob, :data, Rails.configuration.x.streaming_api_base_url, *data_hosts
     p.manifest_src    :self, assets_host
   end
 end