From ccaefd139d33f2f0bf4d097131bcf91960bee956 Mon Sep 17 00:00:00 2001 From: Thibaut Girka Date: Thu, 6 Feb 2020 11:25:18 +0100 Subject: Add environment variable to specify extra data hosts Fixes #1276 --- config/initializers/content_security_policy.rb | 2 ++ 1 file changed, 2 insertions(+) (limited to 'config') diff --git a/config/initializers/content_security_policy.rb b/config/initializers/content_security_policy.rb index 810aa2880..269a7d1c9 100644 --- a/config/initializers/content_security_policy.rb +++ b/config/initializers/content_security_policy.rb @@ -23,6 +23,8 @@ if Rails.env.production? data_hosts << "https://#{url.host}" end + data_hosts.concat(ENV['EXTRA_DATA_HOSTS'].split('|')) if ENV['EXTRA_DATA_HOSTS'] + data_hosts.uniq! Rails.application.config.content_security_policy do |p| -- cgit