From 4ae97a2e4c4bea850c95a523e84e0424e7c18ffd Mon Sep 17 00:00:00 2001 From: Claire Date: Thu, 17 Nov 2022 21:31:52 +0100 Subject: [PATCH] Fix OAuth flow being broken by recent CSP change (#20958) --- app/controllers/oauth/authorizations_controller.rb | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/app/controllers/oauth/authorizations_controller.rb b/app/controllers/oauth/authorizations_controller.rb index 45073c968..5449cfb1a 100644 --- a/app/controllers/oauth/authorizations_controller.rb +++ b/app/controllers/oauth/authorizations_controller.rb @@ -7,6 +7,10 @@ class Oauth::AuthorizationsController < Doorkeeper::AuthorizationsController before_action :authenticate_resource_owner! before_action :set_cache_headers + content_security_policy do |p| + p.form_action(false) + end + include Localized private