FEATURE: Turn CSP on by default

Turning on CSP by default is one of the 2.4 release features.

https://meta.discourse.org/t/discourse-version-2-4/108194
This commit is contained in:
Blake Erickson 2020-01-03 13:35:30 -07:00
parent f7a7263164
commit 3193b0f6e6

View File

@ -1396,7 +1396,7 @@ security:
list_type: compact list_type: compact
slow_down_crawler_rate: 60 slow_down_crawler_rate: 60
content_security_policy: content_security_policy:
default: false default: true
content_security_policy_report_only: content_security_policy_report_only:
default: false default: false
content_security_policy_collect_reports: content_security_policy_collect_reports: