From 7ddbbdea6d4591e6cfe032a0dd212703776e5bb4 Mon Sep 17 00:00:00 2001
From: ThibG <thib@sitedethib.com>
Date: Fri, 27 Mar 2020 22:35:57 +0100
Subject: [PATCH] Fix OCR not working on Safari because of unsupported
worker-src CSP (#13323)
Fixes #13321
---
config/initializers/content_security_policy.rb | 2 ++
1 file changed, 2 insertions(+)
diff --git a/config/initializers/content_security_policy.rb b/config/initializers/content_security_policy.rb
index af7d16aaf..654e2e8cd 100644
--- a/config/initializers/content_security_policy.rb
+++ b/config/initializers/content_security_policy.rb
@@ -32,10 +32,12 @@ Rails.application.config.content_security_policy do |p|
p.connect_src :self, :data, :blob, assets_host, media_host, Rails.configuration.x.streaming_api_base_url, *webpacker_urls
p.script_src :self, :unsafe_inline, :unsafe_eval, assets_host
+ p.child_src :self, :blob, assets_host
p.worker_src :self, :blob, assets_host
else
p.connect_src :self, :data, :blob, assets_host, media_host, Rails.configuration.x.streaming_api_base_url
p.script_src :self, assets_host
+ p.child_src :self, :blob, assets_host
p.worker_src :self, :blob, assets_host
end
end