From: Tom Hughes <tom@compton.nu>
Date: Wed, 23 May 2018 11:09:21 +0000 (+0100)
Subject: Completely remove form-action restrictions for OAuth callbacks
X-Git-Tag: live~4040
X-Git-Url: https://git.openstreetmap.org./rails.git/commitdiff_plain/5deba2782a57a8d84024c941bf0a31b7c0b64c49?hp=5deba2782a57a8d84024c941bf0a31b7c0b64c49

Completely remove form-action restrictions for OAuth callbacks

The CSP3 draft only allows a * rule match network schemes and
mobile devices often use callbacks to custom URL schemes.
---