Fix Content-Security-Policy when using sso-redirect (#32241)

6 months ago · 49407e7623
parent cf28104317
commit 49407e7623
1 changed files with 1 additions and 1 deletions
--- a/app/controllers/concerns/web_app_controller_concern.rb
+++ b/app/controllers/concerns/web_app_controller_concern.rb
@ -13,7 +13,7 @@ module WebAppControllerConcern
      policy = ContentSecurityPolicy.new

      if policy.sso_host.present?
-        p.form_action policy.sso_host
+        p.form_action policy.sso_host, -> { "https://#{request.host}/auth/auth/" }
      else
        p.form_action :none
      end