remove Logster from CSP whitelist (#6593)

Logster 1.3 no longer has inline JS and is now CSP compliant
This commit is contained in:
Kyle Zhao
2018-11-12 17:55:57 -05:00
committed by Sam
parent 0cb33d2b52
commit 3493ea85cc
2 changed files with 0 additions and 23 deletions

View File

@@ -260,16 +260,6 @@ RSpec.describe ApplicationController do
expect(response.headers).to_not include('Content-Security-Policy-Report-Only')
end
it 'does not set CSP for /logs' do
sign_in(Fabricate(:admin))
SiteSetting.content_security_policy = true
get '/logs'
expect(response.status).to eq(200)
expect(response.headers).to_not include('Content-Security-Policy')
end
def parse(csp_string)
csp_string.split(';').map do |policy|
directive, *sources = policy.split