Skip to content

Commit

Permalink
Merge branch 'hotfix/3.3.8'
Browse files Browse the repository at this point in the history
  • Loading branch information
karolsojko committed Jul 30, 2020
2 parents f14816e + af7da1d commit 3a22265
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions config/application.rb
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@
# you've limited to :test, :development, or :production.
Bundler.require(*Rails.groups)

module StandardNotes
module Web
class Application < Rails::Application
# Cross-Origin Resource Sharing (CORS) for Rack compatible web applications.
config.middleware.insert_before 0, Rack::Cors do
Expand All @@ -34,7 +34,7 @@ class Application < Rails::Application
config.x_content_type_options = SecureHeaders::OPT_OUT
config.x_xss_protection = SecureHeaders::OPT_OUT
config.hsts = SecureHeaders::OPT_OUT

config.csp = {
# "meta" values. these will shape the header, but the values are not included in the header.
preserve_schemes: true, # default: false. Schemes are removed from host sources to save bytes and discourage mixed content.
Expand Down

0 comments on commit 3a22265

Please sign in to comment.