Kyle Zhao 488fba3c5f FEATURE: allow plugins and themes to extend the default CSP (#6704) ... * FEATURE: allow plugins and themes to extend the default CSP For plugins: ``` extend_content_security_policy( script_src: ['https://domain.com/script.js', 'https://your-cdn.com/'], style_src: ['https://domain.com/style.css'] ) ``` For themes and components: ``` extend_content_security_policy: type: list default: "script_src:https://domain.com/|style_src:https://domain.com" ``` * clear CSP base url before each test we have a test that stubs `Rails.env.development?` to true * Only allow extending directives that core includes, for now		2018-11-30 09:51:45 -05:00
..
filter_manager_spec.rb	Add rubocop to our build. (#5004)	2017-07-28 10:20:09 +09:00
instance_spec.rb	FEATURE: allow plugins and themes to extend the default CSP (#6704)	2018-11-30 09:51:45 -05:00
metadata_spec.rb	FEATURE: split JavaScript application bundle, so plugins live in own file	2016-11-15 11:43:13 +11:00