From e31433cf8306eab4d5002eed1c20dd02b01894ce Mon Sep 17 00:00:00 2001 From: Thomas Citharel Date: Fri, 4 Nov 2022 11:50:15 +0100 Subject: [PATCH] Allow for resource providers to register a csp policy Signed-off-by: Thomas Citharel --- lib/web/plugs/http_security_plug.ex | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/lib/web/plugs/http_security_plug.ex b/lib/web/plugs/http_security_plug.ex index 3af248bde..912c98657 100644 --- a/lib/web/plugs/http_security_plug.ex +++ b/lib/web/plugs/http_security_plug.ex @@ -166,8 +166,12 @@ defmodule Mobilizon.Web.Plugs.HTTPSecurityPlug do global_search_policy = [Keyword.get(GlobalSearch.service().csp(), type, [])] pictures_policy = [Keyword.get(Pictures.service().csp(), type, [])] + resource_providers = Config.get([Mobilizon.Service.ResourceProviders, :csp_policy, type], []) + Enum.join( - config_policy ++ front_end_analytics_policy ++ global_search_policy ++ pictures_policy, + config_policy ++ + front_end_analytics_policy ++ + global_search_policy ++ pictures_policy ++ resource_providers, " " ) end