From 3c4774a5f7b11fa9d3a3640f699488608e3473d6 Mon Sep 17 00:00:00 2001 From: Tom Hughes Date: Thu, 23 Nov 2017 22:22:01 +0000 Subject: [PATCH 1/1] Allow images to be loaded from piwik --- config/initializers/secure_headers.rb | 1 + 1 file changed, 1 insertion(+) diff --git a/config/initializers/secure_headers.rb b/config/initializers/secure_headers.rb index f4633d72f..f30a4b86c 100644 --- a/config/initializers/secure_headers.rb +++ b/config/initializers/secure_headers.rb @@ -15,6 +15,7 @@ if defined?(CSP_REPORT_URL) :report_uri => [CSP_REPORT_URL] } + csp_policy[:img_src] << PIWIK["location"] if defined?(PIWIK) csp_policy[:script_src] << PIWIK["location"] if defined?(PIWIK) else csp_policy = SecureHeaders::OPT_OUT -- 2.39.5