From 40c0af21771c4fff5fafc9427d03b6143a96ad2c Mon Sep 17 00:00:00 2001 From: Diego Barreiro Date: Sun, 7 Apr 2019 14:01:21 +0200 Subject: [PATCH] DEV: Whitelist CarbonAds URLs on CSP --- plugin.rb | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/plugin.rb b/plugin.rb index 2a3fd63..c3d4375 100755 --- a/plugin.rb +++ b/plugin.rb @@ -21,4 +21,17 @@ after_initialize do Discourse::Application.routes.append do get '/ads.txt' => "adstxt#index" end + + if !SiteSetting.content_security_policy_script_src.split('|'.freeze).include?("http://cdn.carbonads.com") + SiteSetting.content_security_policy_script_src = SiteSetting.content_security_policy_script_src+'|http://cdn.carbonads.com' + end + if !SiteSetting.content_security_policy_script_src.split('|'.freeze).include?("https://cdn.carbonads.com") + SiteSetting.content_security_policy_script_src = SiteSetting.content_security_policy_script_src+'|https://cdn.carbonads.com' + end + if !SiteSetting.content_security_policy_script_src.split('|'.freeze).include?("http://srv.carbonads.net") + SiteSetting.content_security_policy_script_src = SiteSetting.content_security_policy_script_src+'|http://srv.carbonads.net' + end + if !SiteSetting.content_security_policy_script_src.split('|'.freeze).include?("https://srv.carbonads.net") + SiteSetting.content_security_policy_script_src = SiteSetting.content_security_policy_script_src+'|https://srv.carbonads.net' + end end