IntenseWebs/discourse
3
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2025-02-25 18:55:32 -06:00
Code Issues Packages Projects Releases Wiki Activity

DEV: Support passing relative URLs CSP builder (#19176)

Browse Source 
Raw paths like `/test/path` are not supported natively in the CSP. This commit prepends the site's base URL to these paths. This allows plugins to add 'local' assets to the CSP without needing to hardcode the site's hostname.
This commit is contained in:
David Taylor
2022-11-24 11:27:47 +00:00
committed by GitHub
parent a34838d671
commit 174a8b431b
3 changed files with 17 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
spec/fixtures/plugins/csp_extension/plugin.rb vendored
View File

@@ -6,7 +6,7 @@
# authors: xrav3nz
extend_content_security_policy(
script_src: ['https://from-plugin.com'],
script_src: ['https://from-plugin.com', '/local/path'],
object_src: ['https://test-stripping.com'],
frame_ancestors: ['https://frame-ancestors-plugin.ext'],
manifest_src: ['https://manifest-src.com']