X-Git-Url: https://git.openstreetmap.org./rails.git/blobdiff_plain/d82cc08734552f75e7c1b5bd05b498dbb97072a4..89a4a9d59cb4695d143b4edcf9d0d5e8eb9ea3ee:/config/initializers/secure_headers.rb?ds=inline diff --git a/config/initializers/secure_headers.rb b/config/initializers/secure_headers.rb index a320836c6..daddd762d 100644 --- a/config/initializers/secure_headers.rb +++ b/config/initializers/secure_headers.rb @@ -8,7 +8,7 @@ csp_policy = { :frame_ancestors => %w['self'], :frame_src => %w['self'], :img_src => %w['self' data: www.gravatar.com *.wp.com *.tile.openstreetmap.org *.tile.thunderforest.com *.openstreetmap.fr], - :manifest_src => %w['none'], + :manifest_src => %w['self'], :media_src => %w['none'], :object_src => %w['self'], :plugin_types => %w[],