summaryrefslogtreecommitdiff
path: root/Gemfile
diff options
context:
space:
mode:
authorRobert Speicher <robert@gitlab.com>2016-07-18 21:29:04 +0000
committerRobert Speicher <robert@gitlab.com>2016-07-18 21:29:04 +0000
commit9065f9c5ff073d376eb6377ca63ead93623fc8a3 (patch)
treea890b8375d7a996a50f437c64a87ce052e63d309 /Gemfile
parentf0b446e55506b251e85afd4bb063586bccb52eb2 (diff)
parentc2fe22f8f419a8e562f0f34e8c0f478aefc34ec0 (diff)
downloadgitlab-ce-9065f9c5ff073d376eb6377ca63ead93623fc8a3.tar.gz
Merge branch 'csp-basics' into 'master'
Content Security Policy Ref: #18231 This uses twitter's [secure_headers gem](https://github.com/twitter/secureheaders). See merge request !4770
Diffstat (limited to 'Gemfile')
-rw-r--r--Gemfile3
1 files changed, 3 insertions, 0 deletions
diff --git a/Gemfile b/Gemfile
index 6ae9086a541..8a30a819660 100644
--- a/Gemfile
+++ b/Gemfile
@@ -349,3 +349,6 @@ gem 'health_check', '~> 2.1.0'
# System information
gem 'vmstat', '~> 2.1.0'
gem 'sys-filesystem', '~> 1.1.6'
+
+# Secure headers for Content Security Policy
+gem 'secure_headers', '~> 3.3'