Skip to content

Commit 1ac621f

Browse files
committed
remove another case of frame/child src mucking
1 parent 64c0acb commit 1ac621f

File tree

1 file changed

+1
-7
lines changed

1 file changed

+1
-7
lines changed

lib/secure_headers/headers/policy_management.rb

Lines changed: 1 addition & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -257,17 +257,11 @@ def populate_fetch_source_with_default!(original, additions)
257257
# Don't set a default if directive has an existing value
258258
next if original[directive]
259259
if FETCH_SOURCES.include?(directive)
260-
original[directive] = default_for(directive, original)
260+
original[directive] = original[DEFAULT_SRC]
261261
end
262262
end
263263
end
264264

265-
def default_for(directive, original)
266-
return original[FRAME_SRC] if directive == CHILD_SRC && original[FRAME_SRC]
267-
return original[CHILD_SRC] if directive == FRAME_SRC && original[CHILD_SRC]
268-
original[DEFAULT_SRC]
269-
end
270-
271265
def source_list?(directive)
272266
DIRECTIVE_VALUE_TYPES[directive] == :source_list
273267
end

0 commit comments

Comments
 (0)