bterkuile/fizzy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

CSP: move SaaS-only sources out of OSS (#24)

Browse Source
This commit is contained in:
Jeremy Daer
2025-12-10 17:11:36 -08:00
committed by GitHub
parent 219f4d60b6
commit 59d77cf104
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
saas/config/environments/production.rb
+4 -1
View File
@@ -6,7 +6,10 @@ Rails.application.configure do
config.action_mailer.default_url_options = { host: "app.fizzy.do", protocol: "https" }
config.action_mailer.smtp_settings = { domain: "app.fizzy.do", address: "smtp-outbound", port: 25, enable_starttls_auto: false }
# Content Security Policy: report-only mode, to Sentry
# Content Security Policy
config.x.content_security_policy.report_only = true
config.x.content_security_policy.report_uri = "https://o33603.ingest.us.sentry.io/api/4510481339187200/security/?sentry_key=9f126ba30d5f703451a13a2929bb5a10"
config.x.content_security_policy.script_src = "https://challenges.cloudflare.com"
config.x.content_security_policy.frame_src = "https://challenges.cloudflare.com"
config.x.content_security_policy.connect_src = "https://storage.basecamp.com"
end