discourse/spec/fixtures/plugins/csp_extension/plugin.rb
Penar Musaraj e11c6ffa89 FEATURE: allow extending CSP base-uri and object-src
Plus, ensure :none is stripped, it cannot be combined with other sources
2019-01-09 15:34:14 -05:00

10 lines
228 B
Ruby

# name: csp_extension
# about: Fixture plugin that extends default CSP
# version: 1.0
# authors: xrav3nz
extend_content_security_policy(
script_src: ['https://from-plugin.com'],
object_src: ['https://test-stripping.com']
)