Kyle Zhao b0c2e9bb05 minor changes to default script-src (#6770) ...

- add report-sample to force require a sample of the violating code
- do not whitelist GA/GTM's entire domain

2018-12-14 08:17:31 -05:00

..

builder.rb

FEATURE: allow plugins and themes to extend the default CSP (#6704)

2018-11-30 09:51:45 -05:00

default.rb

minor changes to default script-src (#6770)

2018-12-14 08:17:31 -05:00

extension.rb

FEATURE: allow plugins and themes to extend the default CSP (#6704)

2018-11-30 09:51:45 -05:00

middleware.rb

FEATURE: allow plugins and themes to extend the default CSP (#6704)

2018-11-30 09:51:45 -05:00