Make CSP more strict

phrase · Jul 9, 2024 · 4cd2529 · 4cd2529
1 parent c803f54
commit 4cd2529
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/examples/demo/config/initializers/content_security_policy.rb b/examples/demo/config/initializers/content_security_policy.rb
@@ -11,7 +11,7 @@
     policy.img_src :self, :https, :data
     policy.object_src :none
     policy.script_src :self, :https, :strict_dynamic
-    policy.style_src :self, :https, :unsafe_inline
+    policy.style_src :self, :https
     # Specify URI for violation reports
     # policy.report_uri "/csp-violation-report-endpoint"
   end