Add object_src

ManageIQ · Apr 23, 2024 · 4fc3c4b · 4fc3c4b
1 parent 72d8707
commit 4fc3c4b
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/config/initializers/secure_headers.rb b/config/initializers/secure_headers.rb
@@ -22,6 +22,7 @@
       :font_src    => ["'self'", 'https://fonts.gstatic.com', "https://fonts.googleapis.com"],
       :frame_src   => ["'self'"],
       :img_src     => ["'self'", "data:"],
+      :object_src  => ["'self'"],
       :script_src  => ["'unsafe-eval'", "'unsafe-inline'", "'self'"],
       :style_src   => ["'unsafe-inline'", "'self'", "https://fonts.googleapis.com", "https://fonts.gstatic.com"],
     }