summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorStan Hu <stanhu@gmail.com>2019-08-05 15:43:01 -0700
committerStan Hu <stanhu@gmail.com>2019-08-05 15:43:01 -0700
commitb3592187b21829f8792816edc3efd95e54898bef (patch)
tree8625b6f5996be4aa11777c4ffa7a6e8b95ff7a4c
parent84fc914dfe4a07f4f62254ef6993e60e0499963c (diff)
downloadgitlab-ce-b3592187b21829f8792816edc3efd95e54898bef.tar.gz
Use port 45537
-rw-r--r--config/initializers/content_security_policy.rb2
1 files changed, 1 insertions, 1 deletions
diff --git a/config/initializers/content_security_policy.rb b/config/initializers/content_security_policy.rb
index ab1be29f84e..1ee10fb6602 100644
--- a/config/initializers/content_security_policy.rb
+++ b/config/initializers/content_security_policy.rb
@@ -2,7 +2,7 @@ Rails.application.config.content_security_policy do |policy|
policy.default_src :self
policy.object_src :none
policy.worker_src *%w(https://assets.gitlab-static.net https://gl-canary.freetls.fastly.net https://gitlab.com blob:)
- policy.script_src *%w('self' http://localhost:3808 'unsafe-inline' 'unsafe-eval' https://assets.gitlab-static.net https://gl-canary.freetls.fastly.net https://www.google.com/recaptcha/ https://www.recaptcha.net/ https://www.gstatic.com/recaptcha/ https://apis.google.com webpack-internal://*)
+ policy.script_src *%w('self' http://localhost:3808 'unsafe-inline' 'unsafe-eval' https://assets.gitlab-static.net https://gl-canary.freetls.fastly.net https://www.google.com/recaptcha/ https://www.recaptcha.net/ https://www.gstatic.com/recaptcha/ https://apis.google.com https://localhost:45537/)
policy.style_src *%w('self' 'unsafe-inline' https://assets.gitlab-static.net https://gl-canary.freetls.fastly.net)
policy.img_src *%w(* data: blob)
policy.frame_src *%w('self' https://www.google.com/recaptcha/ https://www.recaptcha.net/ https://content.googleapis.com https://content-compute.googleapis.com https://content-cloudbilling.googleapis.com https://content-cloudresourcemanager.googleapis.com https://*.codesandbox.io)