Move default-src CSP rule to ClassProvider

It was impossible to override the default-src CSP rule inside a plugin. This commit fixes this limitation by moving the assignation of the rule from Response class to ClassProvider.
2016-01-23 18:47:47 +01:00
parent cc93b86991
commit 8baa417ece
2 changed files with 1 additions and 1 deletions
--- a/app/Core/Http/Response.php
+++ b/app/Core/Http/Response.php
@@ -220,7 +220,6 @@ class Response extends Base
     */
    public function csp(array $policies = array())
    {
-        $policies['default-src'] = "'self'";
        $values = '';

        foreach ($policies as $policy => $acl) {