Fix OAuth flow being broken by recent CSP change (#20958)

2 years ago · 4ae97a2e4c
parent 231e3ec552
commit 4ae97a2e4c
1 changed files with 4 additions and 0 deletions
--- a/app/controllers/oauth/authorizations_controller.rb
+++ b/app/controllers/oauth/authorizations_controller.rb
@ -7,6 +7,10 @@ class Oauth::AuthorizationsController < Doorkeeper::AuthorizationsController
  before_action :authenticate_resource_owner!
  before_action :set_cache_headers

+  content_security_policy do |p|
+    p.form_action(false)
+  end
+
  include Localized

  private