We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 1bd1e4c commit 7e8d967Copy full SHA for 7e8d967
lib/secure_headers/headers/content_security_policy.rb
@@ -155,9 +155,10 @@ def dedup_source_list(sources)
155
wild_sources = sources.select { |source| source =~ STAR_REGEXP }
156
157
if wild_sources.any?
158
+ schemes = sources.map { |source| [source, URI(source).scheme] }.to_h
159
sources.reject do |source|
160
!wild_sources.include?(source) &&
- wild_sources.any? { |pattern| URI(pattern).scheme == URI(source).scheme && File.fnmatch(pattern, source) }
161
+ wild_sources.any? { |pattern| schemes[pattern] == schemes[source] && File.fnmatch(pattern, source) }
162
end
163
else
164
sources
0 commit comments