X-Git-Url: https://git.openstreetmap.org./rails.git/blobdiff_plain/707ebddbb5da007406ae04e9a418882fc278be01..2d7e0a397a1b2dbed74f40439c1305b1b48a063e:/app/controllers/oauth2_authorizations_controller.rb?ds=inline diff --git a/app/controllers/oauth2_authorizations_controller.rb b/app/controllers/oauth2_authorizations_controller.rb index 54a63fc84..415ab2775 100644 --- a/app/controllers/oauth2_authorizations_controller.rb +++ b/app/controllers/oauth2_authorizations_controller.rb @@ -3,13 +3,8 @@ class Oauth2AuthorizationsController < Doorkeeper::AuthorizationsController prepend_before_action :authorize_web before_action :set_locale - before_action :allow_all_form_action, :only => [:new, :create] - authorize_resource :class => false - - private + allow_all_form_action :only => :new - def allow_all_form_action - override_content_security_policy_directives(:form_action => []) if Settings.csp_enforce || Settings.key?(:csp_report_url) - end + authorize_resource :class => false end