Files
discourse/spec/components
Kyle Zhao 488fba3c5f FEATURE: allow plugins and themes to extend the default CSP (#6704)
* FEATURE: allow plugins and themes to extend the default CSP

For plugins:

```
extend_content_security_policy(
  script_src: ['https://domain.com/script.js', 'https://your-cdn.com/'],
  style_src: ['https://domain.com/style.css']
)
```

For themes and components:

```
extend_content_security_policy:
  type: list
  default: "script_src:https://domain.com/|style_src:https://domain.com"
```

* clear CSP base url before each test

we have a test that stubs `Rails.env.development?` to true

* Only allow extending directives that core includes, for now
2018-11-30 09:51:45 -05:00
..
2017-07-28 10:20:09 +09:00
2018-01-30 08:54:37 +11:00
2017-07-28 10:20:09 +09:00
2017-07-28 10:20:09 +09:00
2018-07-05 15:34:58 +10:00
2018-04-18 11:32:32 +05:30
2018-08-27 14:50:56 +10:00