From: Gregory Igelmund <github.com@grekko.de>
Date: Thu, 21 Mar 2024 11:09:32 +0000 (+0100)
Subject: Replace csp_meta_tag with `secure_headers` nonce
X-Git-Tag: live~704^2
X-Git-Url: https://git.openstreetmap.org./rails.git/commitdiff_plain/f665566574520839f5471d6a23f59e445c8662de

Replace csp_meta_tag with `secure_headers` nonce
---

diff --git a/app/views/layouts/_head.html.erb b/app/views/layouts/_head.html.erb
index 0ee5bf9c0..34046bcab 100644
--- a/app/views/layouts/_head.html.erb
+++ b/app/views/layouts/_head.html.erb
@@ -11,6 +11,6 @@
   <%= yield :head %>
   <%= yield :auto_discovery_link_tag %>
   <%= csrf_meta_tag %>
-  <%= csp_meta_tag %>
+  <meta name="csp-nonce" content="<%= content_security_policy_style_nonce %>" />
   <title><%= "#{@title} | " if @title %><%= t "layouts.project_name.title" %></title>
 <% end %>