Add csp

jaspermayone · Aug 7, 2024 · 3acc6b1 · 3acc6b1
1 parent d10c308
commit 3acc6b1
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/app/views/layouts/application.html.erb b/app/views/layouts/application.html.erb
@@ -13,6 +13,9 @@
       </title>
       <meta name="description" content="" />
       <meta name="viewport" content="width=device-width, initial-scale=1">
+      <meta
+        http-equiv="Content-Security-Policy"
+        content="default-src 'self'; img-src https://*; child-src 'none';">
       <%= yield(:head) if content_for?(:head) %>
       <%= csrf_meta_tags %>
       <%= csp_meta_tag %>