app/controllers/concerns/static_object_external_storage_csp.rb


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16

# frozen_string_literal: true

module StaticObjectExternalStorageCSP
  extend ActiveSupport::Concern

  included do
    content_security_policy do |p|
      next if p.directives.blank?
      next unless Gitlab::CurrentSettings.static_objects_external_storage_enabled?

      default_connect_src = p.directives['connect-src'] || p.directives['default-src']
      connect_src_values = Array.wrap(default_connect_src) | [Gitlab::CurrentSettings.static_objects_external_storage_url]
      p.connect_src(*connect_src_values)
    end
  end
end