From ebb1fba41db203fb05d2f35c62b774dd4534a021 Mon Sep 17 00:00:00 2001 From: Tom Hughes Date: Fri, 10 May 2024 17:55:11 +0100 Subject: [PATCH] Really remove login.live.com from CSP allow list --- app/controllers/accounts_controller.rb | 4 ++-- app/controllers/users_controller.rb | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/app/controllers/accounts_controller.rb b/app/controllers/accounts_controller.rb index 1f1cc577a..6b47ca666 100644 --- a/app/controllers/accounts_controller.rb +++ b/app/controllers/accounts_controller.rb @@ -17,7 +17,7 @@ class AccountsController < ApplicationController @tokens = current_user.oauth_tokens.authorized append_content_security_policy_directives( - :form_action => %w[accounts.google.com *.facebook.com login.live.com login.microsoftonline.com github.com meta.wikimedia.org] + :form_action => %w[accounts.google.com *.facebook.com login.microsoftonline.com github.com meta.wikimedia.org] ) if errors = session.delete(:user_errors) @@ -32,7 +32,7 @@ class AccountsController < ApplicationController @tokens = current_user.oauth_tokens.authorized append_content_security_policy_directives( - :form_action => %w[accounts.google.com *.facebook.com login.live.com login.microsoftonline.com github.com meta.wikimedia.org] + :form_action => %w[accounts.google.com *.facebook.com login.microsoftonline.com github.com meta.wikimedia.org] ) user_params = params.require(:user).permit(:display_name, :new_email, :pass_crypt, :pass_crypt_confirmation, :auth_provider) diff --git a/app/controllers/users_controller.rb b/app/controllers/users_controller.rb index 417991292..2cdec642d 100644 --- a/app/controllers/users_controller.rb +++ b/app/controllers/users_controller.rb @@ -63,7 +63,7 @@ class UsersController < ApplicationController parse_oauth_referer @referer append_content_security_policy_directives( - :form_action => %w[accounts.google.com *.facebook.com login.live.com login.microsoftonline.com github.com meta.wikimedia.org] + :form_action => %w[accounts.google.com *.facebook.com login.microsoftonline.com github.com meta.wikimedia.org] ) if current_user -- 2.39.5