Add editor link scheme to the CSP

BetterErrors · Dec 11, 2020 · 855d40a · 855d40a
1 parent fff870b
commit 855d40a
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 0 deletions.
diff --git a/lib/better_errors/editor.rb b/lib/better_errors/editor.rb
@@ -84,6 +84,10 @@ def url(raw_path, line)
       url_proc.call(file, line)
     end
 
+    def scheme
+      url('/fake', 42).sub(/:.*/, ':')
+    end
+
     private
 
     attr_reader :url_proc

diff --git a/lib/better_errors/middleware.rb b/lib/better_errors/middleware.rb
@@ -122,6 +122,7 @@ def show_error_page(env, exception=nil)
           # Inline style is required by the syntax highlighter.
           "style-src 'self' 'unsafe-inline'",
           "connect-src 'self'",
+          "navigate-to 'self' #{BetterErrors.editor.scheme}",
         ].join('; '),
       }