Fix OAuth flow being broken by recent CSP change (mastodon#20958)

mfenniak · Nov 17, 2022 · 4ae97a2 · 4ae97a2
1 parent 231e3ec
commit 4ae97a2
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/app/controllers/oauth/authorizations_controller.rb b/app/controllers/oauth/authorizations_controller.rb
@@ -7,6 +7,10 @@ class Oauth::AuthorizationsController < Doorkeeper::AuthorizationsController
  before_action :authenticate_resource_owner!
  before_action :set_cache_headers
 
+ content_security_policy do |p|
+ p.form_action(false)
+ end
+
  include Localized
 
  private