Reduce CSP configuration changes with upstream (#2536)

2025-12-16 01:09:55 +00:00 · 2023-12-27 09:54:05 +01:00
parent 7b7b6d234b
commit 19e14654cc
3 changed files with 33 additions and 47 deletions
--- a/app/lib/content_security_policy.rb
+++ b/app/lib/content_security_policy.rb
@@ -10,11 +10,15 @@ class ContentSecurityPolicy
  end

  def media_hosts
-    [assets_host, cdn_host_value].compact
+    [assets_host, cdn_host_value].concat(extra_data_hosts).compact
  end

  private

+  def extra_data_hosts
+    ENV.fetch('EXTRA_DATA_HOSTS', '').split('|')
+  end
+
  def url_from_configured_asset_host
    Rails.configuration.action_controller.asset_host
  end