|
|
@@ -11,10 +11,10 @@ SecureHeaders::Configuration.default do |config|
|
|
|
}
|
|
|
config.csp = {
|
|
|
# FIXME: only enable localhost for development
|
|
|
- default_src: %w('self' http://localhost:3000 ws://localhost:3035 http://localhost:3035),
|
|
|
+ default_src: %w('self' http://localhost:3000 ws://localhost:3035 http://localhost:3035 https://kit-free.fontawesome.com),
|
|
|
|
|
|
# FIXME: only enable unsafe-* for development
|
|
|
- script_src: %w('self' 'unsafe-eval' 'unsafe-inline'),
|
|
|
+ script_src: %w('self' 'unsafe-eval' 'unsafe-inline' https://kit.fontawesome.com/589a3d92cd.js),
|
|
|
}
|
|
|
end
|
|
|
|