From 1f1029cf1ae868cf73620c8c1836faaec115d352 Mon Sep 17 00:00:00 2001 From: Tom Hughes Date: Wed, 16 May 2018 20:40:55 +0100 Subject: [PATCH] Remove unsafe-inline form default style policy --- config/initializers/secure_headers.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/initializers/secure_headers.rb b/config/initializers/secure_headers.rb index 9af170623..696efc729 100644 --- a/config/initializers/secure_headers.rb +++ b/config/initializers/secure_headers.rb @@ -12,7 +12,7 @@ if defined?(CSP_REPORT_URL) :object_src => %w['self'], :plugin_types => %w[], :script_src => %w['self'], - :style_src => %w['self' 'unsafe-inline'], + :style_src => %w['self'], :report_uri => [CSP_REPORT_URL] } -- 2.39.5