Fix CSP reporting endpoitn. Fix the SER for CSP

2025-11-04 23:22:15 +11:00
parent 6049429a41
commit 631b2b53bb
3 changed files with 14 additions and 10 deletions
--- a/config/initializers/content_security_policy.rb
+++ b/config/initializers/content_security_policy.rb
@@ -53,7 +53,7 @@ Rails.application.configure do
    # Additional security headers for WebAuthn
    # Required for WebAuthn to work properly
    policy.require_trusted_types_for :none
-    policy.report_uri  = "/api/csp-violation-report"
+    policy.report_uri  "/api/csp-violation-report"
  end

  # Start with CSP in report-only mode for testing