From 469c158217a6f93a2d1ed74a0d58c23e6257dde8 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?J=C3=A9r=C3=A9my=20Lecour?= Date: Mon, 19 Aug 2019 23:58:14 +0200 Subject: [PATCH] allow bloc scheme for styles in development --- config/initializers/content_security_policy.rb | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/config/initializers/content_security_policy.rb b/config/initializers/content_security_policy.rb index 593b1d5..f38a4ce 100644 --- a/config/initializers/content_security_policy.rb +++ b/config/initializers/content_security_policy.rb @@ -10,7 +10,11 @@ Rails.application.config.content_security_policy do |policy| policy.img_src :self, :https, :data policy.object_src :none policy.script_src :self, :https - policy.style_src :self, :https + if Rails.env.development? + policy.style_src :self, :https, :blob + else + policy.style_src :self, :https + end # If you are using webpack-dev-server then specify webpack-dev-server host policy.connect_src :self, :https, "http://localhost:3035", "ws://localhost:3035" if Rails.env.development?