Modify headers to comply with secure content policy

internetee · May 17, 2021 · c86168b · c86168b
1 parent 0ac4755
commit c86168b
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/config/application.rb b/config/application.rb
@@ -57,7 +57,10 @@ class Application < Rails::Application
           'script-src https://www.recaptcha.net/recaptcha/ ' \
           'https://www.google.com/recaptcha/ ' \
           'https://www.gstatic.com/recaptcha/;' \
-          "frame-src 'self' https://www.google.com/recaptcha/",
+          'img-src www.gstatic.com;'\
+          "frame-src 'self' https://www.google.com/recaptcha/ https://www.google.com https://www.recaptcha.net/recaptcha/;"\
+          "object-src 'none';"\
+          "base-uri 'none';",
     }
 
     config.active_support.parse_json_times = true