Add object_src

ManageIQ · Apr 23, 2024 · f5a6995 · f5a6995
1 parent 04ceead
commit f5a6995
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/config/initializers/secure_headers.rb b/config/initializers/secure_headers.rb
@@ -22,6 +22,7 @@
       :font_src    => ["'self'", 'https://fonts.gstatic.com', "https://fonts.googleapis.com"],
       :frame_src   => ["'self'"],
       :img_src     => ["'self'", "data:"],
+      :object_src  => ["'self'"],
       :script_src  => ["'unsafe-eval'", "'unsafe-inline'", "'self'"],
       :style_src   => ["'unsafe-inline'", "'self'", "https://fonts.googleapis.com", "https://fonts.gstatic.com"]
     }