techhub/mastodon
2
0
Fork 0
Code Activity

Change design of embed modal in web UI (#31801)

Browse Source
This commit is contained in:
Eugen Rochko
2024-09-12 14:54:16 +02:00
committed by GitHub
parent ab763c493f
commit 24ef8255b3
12 changed files with 278 additions and 245 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
config/initializers/content_security_policy.rb
View File

@@ -38,17 +38,16 @@ Rails.application.config.content_security_policy do |p|
p.img_src :self, :data, :blob, *media_hosts
p.style_src :self, assets_host
p.media_src :self, :data, *media_hosts
p.frame_src :self, :https
p.manifest_src :self, assets_host
if sso_host.present?
p.form_action :self, sso_host
p.form_action :self, sso_host
else
p.form_action :self
p.form_action :self
end
p.child_src :self, :blob, assets_host
p.worker_src :self, :blob, assets_host
p.child_src :self, :blob, assets_host
p.worker_src :self, :blob, assets_host
if Rails.env.development?
webpacker_public_host = ENV.fetch('WEBPACKER_DEV_SERVER_PUBLIC', Webpacker.config.dev_server[:public])
@@ -56,9 +55,11 @@ Rails.application.config.content_security_policy do |p|
p.connect_src :self, :data, :blob, *media_hosts, Rails.configuration.x.streaming_api_base_url, *front_end_build_urls
p.script_src :self, :unsafe_inline, :unsafe_eval, assets_host
p.frame_src :self, :https, :http
else
p.connect_src :self, :data, :blob, *media_hosts, Rails.configuration.x.streaming_api_base_url
p.script_src :self, assets_host, "'wasm-unsafe-eval'"
p.frame_src :self, :https
end
end