]> cat aescling's git repositories - mastodon.git/commit
cat aescling's git repositories / mastodon.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 132dd28) | patch
Remove form_action from CSP
authorRey Tucker <git@reytucker.us>
Thu, 13 Dec 2018 00:58:57 +0000 (19:58 -0500)
committerThibG <thib@sitedethib.com>
Fri, 14 Dec 2018 07:02:06 +0000 (08:02 +0100)
commit35b2ba5030dd7fb5ddbb8cb34d0fd54cec8cf269
tree45c35454ac66b5755e24a6915c865c484cf5277etree | snapshot
parent132dd281623d1d4a4651a60c9879e39070d5ecf3commit | diff
Remove form_action from CSP

This trips an issue when trying to authenticate through to
third-party sites, e.g. bridge.joinmastodon.org:

    Refused to send form data to 'https://bridge.joinmastodon.org/'
    because it violates the following Content Security Policy
    directive: "form-action 'self'".

Thread: https://vulpine.club/@digifox/101230933751352042
config/initializers/content_security_policy.rb diff | blob | history
source code fur Kibicat Mastodon