DEV: Whitelist CarbonAds URLs on CSP

This commit is contained in:
Diego Barreiro 2019-04-07 14:01:21 +02:00 committed by Neil Lalonde
parent 0980914d0c
commit 40c0af2177
1 changed files with 13 additions and 0 deletions

View File

@ -21,4 +21,17 @@ after_initialize do
Discourse::Application.routes.append do
get '/ads.txt' => "adstxt#index"
end
if !SiteSetting.content_security_policy_script_src.split('|'.freeze).include?("http://cdn.carbonads.com")
SiteSetting.content_security_policy_script_src = SiteSetting.content_security_policy_script_src+'|http://cdn.carbonads.com'
end
if !SiteSetting.content_security_policy_script_src.split('|'.freeze).include?("https://cdn.carbonads.com")
SiteSetting.content_security_policy_script_src = SiteSetting.content_security_policy_script_src+'|https://cdn.carbonads.com'
end
if !SiteSetting.content_security_policy_script_src.split('|'.freeze).include?("http://srv.carbonads.net")
SiteSetting.content_security_policy_script_src = SiteSetting.content_security_policy_script_src+'|http://srv.carbonads.net'
end
if !SiteSetting.content_security_policy_script_src.split('|'.freeze).include?("https://srv.carbonads.net")
SiteSetting.content_security_policy_script_src = SiteSetting.content_security_policy_script_src+'|https://srv.carbonads.net'
end
end